Search Results (24 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2017-15204 1 Kanboard 1 Kanboard 2025-04-20 N/A
In Kanboard before 1.0.47, by altering form data, an authenticated user can add automatic actions to a private project of another user.
CVE-2017-12850 1 Kanboard 1 Kanboard 2025-04-20 N/A
An authenticated standard user could reset the password of other users (including the admin) by altering form data. Affects kanboard before 1.0.46.
CVE-2014-3920 1 Kanboard 1 Kanboard 2025-04-12 N/A
Cross-site request forgery (CSRF) vulnerability in Kanboard before 1.0.6 allows remote attackers to hijack the authentication of administrators for requests that add an administrative user via a save action to the default URI.
CVE-2019-7324 1 Kanboard 1 Kanboard 2024-11-21 N/A
app/Core/Paginator.php in Kanboard before 1.2.8 has XSS in pagination sorting.