CVE-2017-15205

The CVE-2017-15205 issue affects Kanboard prior to 1.0.47. An authenticated user can exploit a flaw by altering form data to download attachments from private projects belonging to other users. Root cause is inadequate validation of form data on attachment access, enabling vertical privilege esca...

CVE-2017-15205

In Kanboard before 1.0.47, by altering form data, an authenticated user can download attachments from a private project of another user...