Kanboard

Kanboard

51 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2024-51747

Exploit
  • EPSS 0.84%
  • Veröffentlicht 11.11.2024 20:15:19
  • Zuletzt bearbeitet 10.03.2025 17:50:49

Kanboard is project management software that focuses on the Kanban methodology. An authenticated Kanboard admin can read and delete arbitrary files from the server. File attachments, that are viewable or downloadable in Kanboard are resolved through ...

6.3

CVE-2024-36399

Exploit
  • EPSS 0.35%
  • Veröffentlicht 06.06.2024 16:15:12
  • Zuletzt bearbeitet 21.11.2024 09:22:06

Kanboard is project management software that focuses on the Kanban methodology. The vuln is in app/Controller/ProjectPermissionController.php function addUser(). The users permission to add users to a project only get checked on the URL parameter pro...

4.8

CVE-2024-22720

Exploit
  • EPSS 0.4%
  • Veröffentlicht 24.01.2024 18:15:08
  • Zuletzt bearbeitet 05.06.2025 16:15:26

Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature.

8.8

CVE-2023-36813

Exploit
  • EPSS 0.92%
  • Veröffentlicht 05.07.2023 22:15:09
  • Zuletzt bearbeitet 10.04.2025 20:47:18

Kanboard is project management software that focuses on the Kanban methodology. In versions prior to 1.2.31authenticated user is able to perform a SQL Injection, leading to a privilege escalation or loss of confidentiality. It appears that in some in...

5.4

CVE-2023-33969

Exploit
  • EPSS 0.51%
  • Veröffentlicht 05.06.2023 20:15:09
  • Zuletzt bearbeitet 21.11.2024 08:06:19

Kanboard is open source project management software that focuses on the Kanban methodology. A stored Cross site scripting (XSS) allows an attacker to execute arbitrary Javascript and any user who views the task containing the malicious code will be e...

6.5

CVE-2023-33970

Exploit
  • EPSS 0.52%
  • Veröffentlicht 05.06.2023 20:15:09
  • Zuletzt bearbeitet 21.11.2024 08:06:19

Kanboard is open source project management software that focuses on the Kanban methodology. A vulnerability related to a `missing access control` was found, which allows a User with the lowest privileges to leak all the tasks and projects titles with...

5.4

CVE-2023-33968

Exploit
  • EPSS 0.38%
  • Veröffentlicht 05.06.2023 20:15:09
  • Zuletzt bearbeitet 21.11.2024 08:06:18

Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are subject to a missing access control vulnerability that allows a user with low privileges to create or transfer tasks to any proje...

6.5

CVE-2023-33956

Exploit
  • EPSS 0.63%
  • Veröffentlicht 05.06.2023 20:15:09
  • Zuletzt bearbeitet 21.11.2024 08:06:17

Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are subject to an Insecure direct object reference (IDOR) vulnerability present in the application's URL parameter. This vulnerabilit...

5.4

CVE-2023-32685

  • EPSS 0.51%
  • Veröffentlicht 30.05.2023 05:15:11
  • Zuletzt bearbeitet 21.11.2024 08:03:50

Kanboard is project management software that focuses on the Kanban methodology. Due to improper handling of elements under the `contentEditable` element, maliciously crafted clipboard content can inject arbitrary HTML tags into the DOM. A low-privile...

6.1

CVE-2019-7324

  • EPSS 1.28%
  • Veröffentlicht 04.02.2019 19:29:00
  • Zuletzt bearbeitet 21.11.2024 04:48:00

app/Core/Paginator.php in Kanboard before 1.2.8 has XSS in pagination sorting.