Vulnerabilities > CVE-2023-36813 - Unspecified vulnerability in Kanboard

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

kanboard

NVD

Published: 2023-07-05

Updated: 2024-11-21

Summary

Kanboard is project management software that focuses on the Kanban methodology. In versions prior to 1.2.31authenticated user is able to perform a SQL Injection, leading to a privilege escalation or loss of confidentiality. It appears that in some insert and update operations, the code improperly uses the PicoDB library to update/insert new information. Version 1.2.31 contains a fix for this issue.

Vulnerable Configurations

Part	Description	Count
Application	Kanboard Kanboard Kanboard 1.0.0 Kanboard Kanboard 1.0.1 Kanboard Kanboard 1.0.2 Kanboard Kanboard 1.0.3 Kanboard Kanboard 1.0.4 Kanboard Kanboard 1.0.5 Kanboard Kanboard 1.0.6 Kanboard Kanboard 1.0.7 Kanboard Kanboard 1.0.8 Kanboard Kanboard 1.0.9 Kanboard Kanboard 1.0.10 Kanboard Kanboard 1.0.11 Kanboard Kanboard 1.0.12 Kanboard Kanboard 1.0.13 Kanboard Kanboard 1.0.14 Kanboard Kanboard 1.0.15 Kanboard Kanboard 1.0.16 Kanboard Kanboard 1.0.17 Kanboard Kanboard 1.0.18 Kanboard Kanboard 1.0.19 Kanboard Kanboard 1.0.20 Kanboard Kanboard 1.0.21 Kanboard Kanboard 1.0.22 Kanboard Kanboard 1.0.23 Kanboard Kanboard 1.0.24 Kanboard Kanboard 1.0.25 Kanboard Kanboard 1.0.26 Kanboard Kanboard 1.0.27 Kanboard Kanboard 1.0.28 Kanboard Kanboard 1.0.29 Kanboard Kanboard 1.0.30 Kanboard Kanboard 1.0.31 Kanboard Kanboard 1.0.32 Kanboard Kanboard 1.0.33 Kanboard Kanboard 1.0.34 Kanboard Kanboard 1.0.35 Kanboard Kanboard 1.0.36 Kanboard Kanboard 1.0.37 Kanboard Kanboard 1.0.38 Kanboard Kanboard 1.0.39 Kanboard Kanboard 1.0.40 Kanboard Kanboard 1.0.41 Kanboard Kanboard 1.0.42 Kanboard Kanboard 1.0.43 Kanboard Kanboard 1.0.44 Kanboard Kanboard 1.0.45 Kanboard Kanboard 1.0.46 Kanboard Kanboard 1.0.47 Kanboard Kanboard 1.0.48 Kanboard Kanboard 1.1.0 Kanboard Kanboard 1.1.1 Kanboard Kanboard 1.2.0 Kanboard Kanboard 1.2.1 Kanboard Kanboard 1.2.2 Kanboard Kanboard 1.2.3 Kanboard Kanboard 1.2.4 Kanboard Kanboard 1.2.5 Kanboard Kanboard 1.2.6 Kanboard Kanboard 1.2.7 Kanboard Kanboard 1.2.8 Kanboard Kanboard 1.2.9 Kanboard Kanboard 1.2.10 Kanboard Kanboard 1.2.11 Kanboard Kanboard 1.2.12 Kanboard Kanboard 1.2.13 Kanboard Kanboard 1.2.14 Kanboard Kanboard 1.2.15 Kanboard Kanboard 1.2.16 Kanboard Kanboard 1.2.17 Kanboard Kanboard 1.2.18 Kanboard Kanboard 1.2.19 Kanboard Kanboard 1.2.20 Kanboard Kanboard 1.2.21 Kanboard Kanboard 1.2.22 Kanboard Kanboard 1.2.23 Kanboard Kanboard 1.2.24 Kanboard Kanboard 1.2.25 Kanboard Kanboard 1.2.26 Kanboard Kanboard 1.2.27 Kanboard Kanboard 1.2.28 Kanboard Kanboard 1.2.29 Kanboard Kanboard 1.2.30	86

Summary

Vulnerable Configurations

References