Vulnerabilities > CVE-2017-15208 - Authorization Bypass Through User-Controlled Key vulnerability in Kanboard

047910
CVSS 4.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
SINGLE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
kanboard
CWE-639

Summary

In Kanboard before 1.0.47, by altering form data, an authenticated user can remove automatic actions from a private project of another user.