CVE-2017-15210

CVE-2017-15210 affects Kanboard prior to 1.0.47. An authenticated user can bypass restrictions by altering form data to view thumbnails of images in another user’s private project. Root cause described as a design/logic flaw in access control handling, enabling partial confidentiality impact. Evi...

CVE-2017-15208

In Kanboard prior to 1.0.47, an authenticated user can remove automatic actions from another user’s private project by altering form data. The CVE-2017-15208 issue arises from a server-side validation flaw that allows modifying project action state without proper authorization. Exploitation detai...

CVE-2017-15200

Affected product: Kanboard prior to 1.0.47. Vulnerability: authenticated user can bypass access control by altering form data to add a new task into another user’s private project. Root cause: missing/insufficient authorization check when task creation. Impact: unauthorized task creation (CVSSv3 ...

CVE-2017-15212

CVE-2017-15212 affects Kanboard prior to 1.0.47. An authenticated user can modify form data to view the names of tags for private projects belonging to other users, indicating insufficient access control on private project metadata. The root cause is a vulnerability in how form data is processed,...

CVE-2017-15211

In Kanboard before 1.0.47, by altering form data, an authenticated user can add an external link to a private project of another user...

CVE-2017-15211

The CVE-2017-15211 issue affects Kanboard before version 1.0.47. An authenticated user can manipulate form data to add an external link to another user’s private project, indicating a permission/authorization flaw in handling project links. Public references document commit fixes and the 1.0.47 r...

CVE-2017-15211

In Kanboard before 1.0.47, by altering form data, an authenticated user can add an external link to a private project of another user...

CVE-2017-15210

In Kanboard before 1.0.47, by altering form data, an authenticated user can see thumbnails of pictures from a private project of another user...

CVE-2017-15201

In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tags of a private project of another user...

CVE-2017-15208

In Kanboard before 1.0.47, by altering form data, an authenticated user can remove automatic actions from a private project of another user...

CVE-2017-15205

In Kanboard before 1.0.47, by altering form data, an authenticated user can download attachments from a private project of another user...

CVE-2017-15202

In Kanboard before 1.0.47, by altering form data, an authenticated user can edit columns of a private project of another user...

CVE-2017-15202

In Kanboard before 1.0.47, by altering form data, an authenticated user can edit columns of a private project of another user...

CVE-2017-15202

Affected software: Kanboard (open source task board software). Vulnerability summary (CVE-2017-15202): Before version 1.0.47, an authenticated user could edit columns in another user’s private project by altering form data. This is due to improper validation of form submissions that control colum...

CVE-2017-15206

Kanboard (before 1.0.47) is affected. An authenticated user can modify form data to add an internal link to another user’s private project, due to the underlying vulnerability in Kanboard prior to 1.0.47. Remediation is to upgrade to 1.0.47 or later (as noted in the public advisory/news). If you ...

Kanboard Design Vulnerability (CNVD-2017-30942)

Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.47. An...

Kanboard Design Vulnerability (CNVD-2017-30941)

Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.47. An...

PT-2017-13898

Name of the Vulnerable Software and Affected Versions Kanboard versions prior to 1.0.47 Description The issue allows an authenticated user to add automatic actions to a private project of another user by altering form data. Recommendations For versions prior to 1.0.47, update to version 1.0.47 or...

PT-2017-13894

Name of the Vulnerable Software and Affected Versions Kanboard versions prior to 1.0.47 Description The issue allows an authenticated user to add a new task to a private project of another user by altering form data. Recommendations For versions prior to 1.0.47, update to version 1.0.47 or later ...

PT-2017-13895

Name of the Vulnerable Software and Affected Versions Kanboard versions prior to 1.0.47 Description The issue allows an authenticated user to edit tags of a private project belonging to another user by altering form data. Recommendations For versions prior to 1.0.47, update to version 1.0.47 or...