Lucene search
+L

1 matches found

OSV
OSV
added 2024/11/22 7:25 a.m.7 views

MGASA-2024-0366 Updated kanboard packages fix security vulnerability

In versions prior to 1.2.31 an authenticated user is able to perform a SQL injection, leading to a privilege escalation or loss of confidentiality. It appears that in some insert and update operations the code improperly uses the PicoDB library to update/insert new information...

8.8CVSS8.7AI score0.00923EPSS
SaveExploits1References3
Rows per page
Query Builder