Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/10 12:00 a.m.•2 views

CVE-2026-25530: Authorization Bypass Through User-Controlled Key

Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, the getSwimlane API method lacks project-level authorization, allowing authenticated users to access swimlane data from projects they cannot access. This vulnerability is fixed in 1.2.50...

4.3CVSS5.9AI score0.00397EPSS
SaveExploits1References1
Rows per page
Query Builder