352 matches found
CVE-2017-15202
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit columns of a private project of another user...
CVE-2017-15211
The CVE-2017-15211 issue affects Kanboard before version 1.0.47. An authenticated user can manipulate form data to add an external link to another user’s private project, indicating a permission/authorization flaw in handling project links. Public references document commit fixes and the 1.0.47 r...
CVE-2017-15201
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tags of a private project of another user...
CVE-2017-15207
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tasks of a private project of another user...
CVE-2017-15210
In Kanboard before 1.0.47, by altering form data, an authenticated user can see thumbnails of pictures from a private project of another user...
CVE-2017-15211
In Kanboard before 1.0.47, by altering form data, an authenticated user can add an external link to a private project of another user...
CVE-2017-15204
In Kanboard before 1.0.47, by altering form data, an authenticated user can add automatic actions to a private project of another user...
CVE-2017-15204
Vulnerability details (CVE-2017-15204): In Kanboard prior to 1.0.47, an authenticated user can modify form data to add automatic actions to another user’s private project. Affected software: Kanboard before 1.0.47. Root cause: insufficient validation of altered form data allowing escalation of ac...
CVE-2017-15202
Affected software: Kanboard (open source task board software). Vulnerability summary (CVE-2017-15202): Before version 1.0.47, an authenticated user could edit columns in another user’s private project by altering form data. This is due to improper validation of form submissions that control colum...
CVE-2017-15200
Affected product: Kanboard prior to 1.0.47. Vulnerability: authenticated user can bypass access control by altering form data to add a new task into another user’s private project. Root cause: missing/insufficient authorization check when task creation. Impact: unauthorized task creation (CVSSv3 ...
CVE-2017-15199
CVE-2017-15199 refers to a vulnerability in Kanboard prior to 1.0.47 where an authenticated user can edit metadata of another user’s private project by manipulating form data. The root cause is input/form data manipulation that affects project metadata fields such as Name, Email, Identifier, and ...
CVE-2017-15206
Kanboard (before 1.0.47) is affected. An authenticated user can modify form data to add an internal link to another user’s private project, due to the underlying vulnerability in Kanboard prior to 1.0.47. Remediation is to upgrade to 1.0.47 or later (as noted in the public advisory/news). If you ...
CVE-2017-15203
In Kanboard before 1.0.47, by altering form data, an authenticated user can remove categories from a private project of another user...
CVE-2017-15206
In Kanboard before 1.0.47, by altering form data, an authenticated user can add an internal link to a private project of another user...
CVE-2017-15210
CVE-2017-15210 affects Kanboard prior to 1.0.47. An authenticated user can bypass restrictions by altering form data to view thumbnails of images in another user’s private project. Root cause described as a design/logic flaw in access control handling, enabling partial confidentiality impact. Evi...
CVE-2017-15197
In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new category to a private project of another user...
CVE-2017-15200
In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new task to a private project of another user...
CVE-2017-15206
In Kanboard before 1.0.47, by altering form data, an authenticated user can add an internal link to a private project of another user...