CVE-2017-15201

In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tags of a private project of another user...

CVE-2017-15201

In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tags of a private project of another user...

CVE-2017-15201

CVE-2017-15201 affects Kanboard versions before 1.0.47. An authenticated user can edit tags of another user’s private project by altering form data, due to a permission/validation issue. Impact is editing private project labels. Remediation: upgrade to Kanboard 1.0.47 (or later) where the issue i...