CVE-2017-15203

CVE-2017-15203 affects Kanboard prior to 1.0.47. An authenticated user can tamper with form data to remove categories from another user’s private project, indicating an access-control/intentional data modification flaw in the project categorization logic. The root cause is not expanded in the pro...