Vulnerabilities > CVE-2024-36399 - Authorization Bypass Through User-Controlled Key vulnerability in Kanboard

CVSS 6.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

LOW

network

low complexity

kanboard

CWE-639

NVD

Published: 2024-06-06

Updated: 2024-09-24

Summary

Kanboard is project management software that focuses on the Kanban methodology. The vuln is in app/Controller/ProjectPermissionController.php function addUser(). The users permission to add users to a project only get checked on the URL parameter project_id. If the user is authorized to add users to this project the request gets processed. The users permission for the POST BODY parameter project_id does not get checked again while processing. An attacker with the 'Project Manager' on a single project may take over any other project. The vulnerability is fixed in 1.2.37.

Vulnerable Configurations

Part	Description	Count
Application	Kanboard Kanboard Kanboard 1.0.0 Kanboard Kanboard 1.0.1 Kanboard Kanboard 1.0.2 Kanboard Kanboard 1.0.3 Kanboard Kanboard 1.0.4 Kanboard Kanboard 1.0.5 Kanboard Kanboard 1.0.6 Kanboard Kanboard 1.0.7 Kanboard Kanboard 1.0.8 Kanboard Kanboard 1.0.9 Kanboard Kanboard 1.0.10 Kanboard Kanboard 1.0.11 Kanboard Kanboard 1.0.12 Kanboard Kanboard 1.0.13 Kanboard Kanboard 1.0.14 Kanboard Kanboard 1.0.15 Kanboard Kanboard 1.0.16 Kanboard Kanboard 1.0.17 Kanboard Kanboard 1.0.18 Kanboard Kanboard 1.0.19 Kanboard Kanboard 1.0.20 Kanboard Kanboard 1.0.21 Kanboard Kanboard 1.0.22 Kanboard Kanboard 1.0.23 Kanboard Kanboard 1.0.24 Kanboard Kanboard 1.0.25 Kanboard Kanboard 1.0.26 Kanboard Kanboard 1.0.27 Kanboard Kanboard 1.0.28 Kanboard Kanboard 1.0.29 Kanboard Kanboard 1.0.30 Kanboard Kanboard 1.0.31 Kanboard Kanboard 1.0.32 Kanboard Kanboard 1.0.33 Kanboard Kanboard 1.0.34 Kanboard Kanboard 1.0.35 Kanboard Kanboard 1.0.36 Kanboard Kanboard 1.0.37 Kanboard Kanboard 1.0.38 Kanboard Kanboard 1.0.39 Kanboard Kanboard 1.0.40 Kanboard Kanboard 1.0.41 Kanboard Kanboard 1.0.42 Kanboard Kanboard 1.0.43 Kanboard Kanboard 1.0.44 Kanboard Kanboard 1.0.45 Kanboard Kanboard 1.0.46 Kanboard Kanboard 1.0.47 Kanboard Kanboard 1.0.48 Kanboard Kanboard 1.1.0 Kanboard Kanboard 1.1.1 Kanboard Kanboard 1.2.0 Kanboard Kanboard 1.2.1 Kanboard Kanboard 1.2.2 Kanboard Kanboard 1.2.3 Kanboard Kanboard 1.2.4 Kanboard Kanboard 1.2.5 Kanboard Kanboard 1.2.6 Kanboard Kanboard 1.2.7 Kanboard Kanboard 1.2.8 Kanboard Kanboard 1.2.9 Kanboard Kanboard 1.2.10 Kanboard Kanboard 1.2.11 Kanboard Kanboard 1.2.12 Kanboard Kanboard 1.2.13 Kanboard Kanboard 1.2.14 Kanboard Kanboard 1.2.15 Kanboard Kanboard 1.2.16 Kanboard Kanboard 1.2.17 Kanboard Kanboard 1.2.18 Kanboard Kanboard 1.2.19 Kanboard Kanboard 1.2.20 Kanboard Kanboard 1.2.21 Kanboard Kanboard 1.2.22 Kanboard Kanboard 1.2.23 Kanboard Kanboard 1.2.24 Kanboard Kanboard 1.2.25 Kanboard Kanboard 1.2.26 Kanboard Kanboard 1.2.27 Kanboard Kanboard 1.2.28 Kanboard Kanboard 1.2.29 Kanboard Kanboard 1.2.30 Kanboard Kanboard 1.2.31 Kanboard Kanboard 1.2.34 Kanboard Kanboard 1.2.35 Kanboard Kanboard 1.2.36	90

Common Weakness Enumeration (CWE)

CWE-639 - Authorization Bypass Through User-Controlled Key

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References