CVE-2017-15199

2017-10-1101:32:54

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.1%

JSON

In Kanboard before 1.0.47, by altering form data, an authenticated user can edit metadata of a private project of another user, as demonstrated by Name, Email, Identifier, and Description.

CPENameOperatorVersion
kanboardeq1.0.45
kanboardeq1.0.19
kanboardeq1.0.34
kanboardeq1.0.35
kanboardeq1.0.13
kanboardeq1.0.14
kanboardeq1.0.5
kanboardeq1.0.7
kanboardeq1.0.24
kanboardeq1.0.12

Name	Operator	Version
kanboard	eq	1.0.45
kanboard	eq	1.0.19
kanboard	eq	1.0.34
kanboard	eq	1.0.35
kanboard	eq	1.0.13
kanboard	eq	1.0.14
kanboard	eq	1.0.5
kanboard	eq	1.0.7
kanboard	eq	1.0.24
kanboard	eq	1.0.12