Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/02/10 4:47 p.m.27 views

CVE-2026-25530 Kanboard is missing authorization check in getSwimlane API allows cross-project data access

Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, the getSwimlane API method lacks project-level authorization, allowing authenticated users to access swimlane data from projects they cannot access. This vulnerability is fixed in 1.2.50...

4.3CVSS0.00235EPSS
SaveExploits1References3
Rows per page
Query Builder