Vulnerabilities > Kanboard
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-06-05 | CVE-2023-33970 | Unspecified vulnerability in Kanboard Kanboard is open source project management software that focuses on the Kanban methodology. | 6.5 |
| 2023-05-30 | CVE-2023-32685 | Cross-site Scripting vulnerability in Kanboard Kanboard is project management software that focuses on the Kanban methodology. | 5.4 |
| 2019-02-04 | CVE-2019-7324 | Cross-site Scripting vulnerability in Kanboard app/Core/Paginator.php in Kanboard before 1.2.8 has XSS in pagination sorting. | 6.1 |
| 2017-10-11 | CVE-2017-15212 | Information Exposure vulnerability in Kanboard In Kanboard before 1.0.47, by altering form data, an authenticated user can at least see the names of tags of a private project of another user. | 4.3 |
| 2017-10-11 | CVE-2017-15211 | Authorization Bypass Through User-Controlled Key vulnerability in Kanboard In Kanboard before 1.0.47, by altering form data, an authenticated user can add an external link to a private project of another user. | 4.3 |
| 2017-10-11 | CVE-2017-15210 | Information Exposure vulnerability in Kanboard In Kanboard before 1.0.47, by altering form data, an authenticated user can see thumbnails of pictures from a private project of another user. | 4.3 |
| 2017-10-11 | CVE-2017-15209 | Authorization Bypass Through User-Controlled Key vulnerability in Kanboard In Kanboard before 1.0.47, by altering form data, an authenticated user can remove attachments from a private project of another user. | 4.3 |
| 2017-10-11 | CVE-2017-15208 | Authorization Bypass Through User-Controlled Key vulnerability in Kanboard In Kanboard before 1.0.47, by altering form data, an authenticated user can remove automatic actions from a private project of another user. | 4.3 |
| 2017-10-11 | CVE-2017-15207 | Authorization Bypass Through User-Controlled Key vulnerability in Kanboard In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tasks of a private project of another user. | 4.3 |
| 2017-10-11 | CVE-2017-15206 | Authorization Bypass Through User-Controlled Key vulnerability in Kanboard In Kanboard before 1.0.47, by altering form data, an authenticated user can add an internal link to a private project of another user. | 4.3 |