CVE-2017-15212

In Kanboard before 1.0.47, by altering form data, an authenticated user can at least see the names of tags of a private project of another user...

CVE-2017-15212

CVE-2017-15212 affects Kanboard prior to 1.0.47. An authenticated user can modify form data to view the names of tags for private projects belonging to other users, indicating insufficient access control on private project metadata. The root cause is a vulnerability in how form data is processed,...