CVE-2017-15196

In Kanboard before 1.0.47, by altering form data, an authenticated user can remove columns from a private project of another user...

CVE-2017-15196

The CVE-2017-15196 issue affects Kanboard prior to version 1.0.47, where an authenticated user can remove columns from another user’s private project by tampering with form data. The root cause is insufficient authorization/validation when processing form submissions that modify project columns. ...

CVE-2017-15196

In Kanboard before 1.0.47, by altering form data, an authenticated user can remove columns from a private project of another user...