CVE-2017-15206
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
11/10/2017
Last modified:
20/04/2025
Description
In Kanboard before 1.0.47, by altering form data, an authenticated user can add an internal link to a private project of another user.
Impact
Base Score 3.x
4.30
Severity 3.x
MEDIUM
Base Score 2.0
4.00
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:kanboard:kanboard:1.0.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:kanboard:kanboard:1.0.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:kanboard:kanboard:1.0.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:kanboard:kanboard:1.0.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:kanboard:kanboard:1.0.4:*:*:*:*:*:*:* | ||
cpe:2.3:a:kanboard:kanboard:1.0.5:*:*:*:*:*:*:* | ||
cpe:2.3:a:kanboard:kanboard:1.0.6:*:*:*:*:*:*:* | ||
cpe:2.3:a:kanboard:kanboard:1.0.7:*:*:*:*:*:*:* | ||
cpe:2.3:a:kanboard:kanboard:1.0.8:*:*:*:*:*:*:* | ||
cpe:2.3:a:kanboard:kanboard:1.0.9:*:*:*:*:*:*:* | ||
cpe:2.3:a:kanboard:kanboard:1.0.10:*:*:*:*:*:*:* | ||
cpe:2.3:a:kanboard:kanboard:1.0.11:*:*:*:*:*:*:* | ||
cpe:2.3:a:kanboard:kanboard:1.0.12:*:*:*:*:*:*:* | ||
cpe:2.3:a:kanboard:kanboard:1.0.13:*:*:*:*:*:*:* | ||
cpe:2.3:a:kanboard:kanboard:1.0.14:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://openwall.com/lists/oss-security/2017/10/04/9
- https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0
- https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
- https://kanboard.net/news/version-1.0.47
- http://openwall.com/lists/oss-security/2017/10/04/9
- https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0
- https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524
- https://kanboard.net/news/version-1.0.47