CVE-2017-15209

Summary: CVE-2017-15209 affects Kanboard prior to 1.0.47. An authenticated user can remove attachments from another user’s private project by altering form data. Impact (as stated): authenticated user can remove attachments in a private project of another user. Technical details (from connected d...