CVE-2017-15209: Authorization Bypass Through User-Controlled Key

In Kanboard before 1.0.47, by altering form data, an authenticated user can remove attachments from a private project of another user...

CVE-2017-15209

In Kanboard before 1.0.47, by altering form data, an authenticated user can remove attachments from a private project of another user...

PT-2017-13903

Name of the Vulnerable Software and Affected Versions Kanboard versions prior to 1.0.47 Description The issue allows an authenticated user to remove attachments from a private project of another user by altering form data. Recommendations For versions prior to 1.0.47, update to version 1.0.47 or...