Vulnerabilities > Authorization Bypass Through User-Controlled Key

DATE CVE VULNERABILITY TITLE RISK
2017-10-11 CVE-2017-15203 Authorization Bypass Through User-Controlled Key vulnerability in Kanboard
In Kanboard before 1.0.47, by altering form data, an authenticated user can remove categories from a private project of another user.
network
low complexity
kanboard CWE-639
4.0
2017-10-11 CVE-2017-15202 Authorization Bypass Through User-Controlled Key vulnerability in Kanboard
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit columns of a private project of another user.
network
low complexity
kanboard CWE-639
4.0
2017-10-11 CVE-2017-15201 Authorization Bypass Through User-Controlled Key vulnerability in Kanboard
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tags of a private project of another user.
network
low complexity
kanboard CWE-639
4.0
2017-10-11 CVE-2017-15200 Authorization Bypass Through User-Controlled Key vulnerability in Kanboard
In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new task to a private project of another user.
network
low complexity
kanboard CWE-639
4.0
2017-10-11 CVE-2017-15199 Authorization Bypass Through User-Controlled Key vulnerability in Kanboard
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit metadata of a private project of another user, as demonstrated by Name, Email, Identifier, and Description.
network
low complexity
kanboard CWE-639
4.0
2017-10-11 CVE-2017-15197 Authorization Bypass Through User-Controlled Key vulnerability in Kanboard
In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new category to a private project of another user.
network
low complexity
kanboard CWE-639
4.0
2017-10-11 CVE-2017-15196 Authorization Bypass Through User-Controlled Key vulnerability in Kanboard
In Kanboard before 1.0.47, by altering form data, an authenticated user can remove columns from a private project of another user.
network
low complexity
kanboard CWE-639
4.0
2017-10-11 CVE-2017-15195 Authorization Bypass Through User-Controlled Key vulnerability in Kanboard
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit swimlanes of a private project of another user.
network
low complexity
kanboard CWE-639
4.0