Kanboard Security Vulnerabilities
4.8CVSS
7.7AI Score
0.0004EPSS
Kanboard is project management software that focuses on the Kanban methodology. In versions prior to 1.2.31authenticated user is able to perform a SQL Injection, leading to a privilege escalation or loss of confidentiality. It appears that in some insert and update operations, the code improperly.....
8.8CVSS
9AI Score
0.001EPSS
Kanboard is open source project management software that focuses on the Kanban methodology. A vulnerability related to a missing access control was found, which allows a User with the lowest privileges to leak all the tasks and projects titles within the software, even if they are not invited or...
6.5CVSS
6.2AI Score
0.001EPSS
Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are subject to a missing access control vulnerability that allows a user with low privileges to create or transfer tasks to any project within the software, even if they have not...
5.4CVSS
5.5AI Score
0.001EPSS
Kanboard is open source project management software that focuses on the Kanban methodology. A stored Cross site scripting (XSS) allows an attacker to execute arbitrary Javascript and any user who views the task containing the malicious code will be exposed to the XSS attack. Note: The default CSP.....
5.4CVSS
5.4AI Score
0.001EPSS
Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are subject to an Insecure direct object reference (IDOR) vulnerability present in the application's URL parameter. This vulnerability enables any user to read files uploaded by any....
6.5CVSS
6.4AI Score
0.001EPSS
Kanboard is project management software that focuses on the Kanban methodology. Due to improper handling of elements under the contentEditable element, maliciously crafted clipboard content can inject arbitrary HTML tags into the DOM. A low-privileged attacker with permission to attach a document.....
5.4CVSS
5.2AI Score
0.001EPSS
6.1CVSS
6AI Score
0.002EPSS
In Kanboard before 1.0.47, by altering form data, an authenticated user can remove columns from a private project of another...
4.3CVSS
4.7AI Score
0.001EPSS
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tags of a private project of another...
4.3CVSS
4.7AI Score
0.001EPSS
In Kanboard before 1.0.47, by altering form data, an authenticated user can remove automatic actions from a private project of another...
4.3CVSS
4.7AI Score
0.001EPSS
In Kanboard before 1.0.47, by altering form data, an authenticated user can add an external link to a private project of another...
4.3CVSS
4.6AI Score
0.001EPSS
In Kanboard before 1.0.47, by altering form data, an authenticated user can download attachments from a private project of another...
4.3CVSS
4.7AI Score
0.001EPSS
In Kanboard before 1.0.47, by altering form data, an authenticated user can see thumbnails of pictures from a private project of another...
4.3CVSS
4.7AI Score
0.001EPSS
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit swimlanes of a private project of another...
4.3CVSS
4.7AI Score
0.001EPSS
In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new category to a private project of another...
4.3CVSS
4.6AI Score
0.001EPSS
In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new task to a private project of another...
4.3CVSS
4.6AI Score
0.001EPSS
In Kanboard before 1.0.47, by altering form data, an authenticated user can at least see the names of tags of a private project of another...
4.3CVSS
4.6AI Score
0.001EPSS
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tasks of a private project of another...
4.3CVSS
4.7AI Score
0.001EPSS
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit a category of a private project of another...
4.3CVSS
4.7AI Score
0.001EPSS
In Kanboard before 1.0.47, by altering form data, an authenticated user can remove attachments from a private project of another...
4.3CVSS
4.7AI Score
0.001EPSS
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit metadata of a private project of another user, as demonstrated by Name, Email, Identifier, and...
4.3CVSS
4.7AI Score
0.001EPSS
In Kanboard before 1.0.47, by altering form data, an authenticated user can add automatic actions to a private project of another...
4.3CVSS
4.6AI Score
0.001EPSS
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit columns of a private project of another...
4.3CVSS
4.7AI Score
0.001EPSS
In Kanboard before 1.0.47, by altering form data, an authenticated user can add an internal link to a private project of another...
4.3CVSS
4.6AI Score
0.001EPSS
In Kanboard before 1.0.47, by altering form data, an authenticated user can remove categories from a private project of another...
4.3CVSS
4.7AI Score
0.001EPSS
An authenticated standard user could reset the password of other users (including the admin) by altering form data. Affects kanboard before...
8.8CVSS
8.7AI Score
0.001EPSS
An authenticated standard user could reset the password of the admin by altering form data. Affects kanboard before...
8.8CVSS
8.7AI Score
0.001EPSS
Cross-site request forgery (CSRF) vulnerability in Kanboard before 1.0.6 allows remote attackers to hijack the authentication of administrators for requests that add an administrative user via a save action to the default...
7AI Score
0.004EPSS