FreeBSDBFCA647C-0456-11EE-BAFD-B42E991FC52EKanboard -- Multiple vulnerabilities
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
40.8%
Kanboard is project management software that focuses on the Kanban
methodology. The last update includes 4 vulnerabilities:
[email protected] reports:
Missing access control in internal task links feature
Stored Cross site scripting in the Task External Link Functionality in Kanboard
Missing Access Control allows User to move and duplicate tasks in Kanboard
Parameter based Indirect Object Referencing leading to private file exposure in Kanboard
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | php80-kanboard | < 1.2.30 | UNKNOWN |
Related
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
40.8%