2 matches found
CVE-2024-36399
Kanboard is project management software that focuses on the Kanban methodology. The vuln is in app/Controller/ProjectPermissionController.php function addUser. The users permission to add users to a project only get checked on the URL parameter projectid. If the user is authorized to add users to...
8.8CVSS5.9AI score0.00353EPSS
SaveExploits1References5
CVE-2024-36399: Improper Access Control
Kanboard is project management software that focuses on the Kanban methodology. The vuln is in app/Controller/ProjectPermissionController.php function addUser. The users permission to add users to a project only get checked on the URL parameter projectid. If the user is authorized to add users to...
8.2CVSS6AI score0.00353EPSS
SaveExploits1References1
20