CVSS: 4.3EPSS: 0%CPEs: 51EXPL: 0CVE-2017-15212
https://notcve.org/view.php?id=CVE-2017-15212
In Kanboard before 1.0.47, by altering form data, an authenticated user can at least see the names of tags of a private project of another user. En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede, por lo menos, ver los nombres de etiquetas de un proyecto privado de otro usuario. • http://openwall.com/lists/oss-security/2017/10/04/9 https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524 https://kanboard.net/news/version-1.0.47 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.3EPSS: 0%CPEs: 51EXPL: 0CVE-2017-15206
https://notcve.org/view.php?id=CVE-2017-15206
In Kanboard before 1.0.47, by altering form data, an authenticated user can add an internal link to a private project of another user. En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede añadir un enlace interno a un proyecto privado de otro usuario. • http://openwall.com/lists/oss-security/2017/10/04/9 https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524 https://kanboard.net/news/version-1.0.47 • CWE-639: Authorization Bypass Through User-Controlled Key •
CVSS: 4.3EPSS: 0%CPEs: 51EXPL: 0CVE-2017-15195
https://notcve.org/view.php?id=CVE-2017-15195
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit swimlanes of a private project of another user. En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede editar calles de un proyecto privado de otro usuario. • http://openwall.com/lists/oss-security/2017/10/04/9 https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524 https://kanboard.net/news/version-1.0.47 • CWE-639: Authorization Bypass Through User-Controlled Key •
CVSS: 4.3EPSS: 0%CPEs: 51EXPL: 0CVE-2017-15208
https://notcve.org/view.php?id=CVE-2017-15208
In Kanboard before 1.0.47, by altering form data, an authenticated user can remove automatic actions from a private project of another user. En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede eliminar acciones automáticas de un proyecto privado de otro usuario. • http://openwall.com/lists/oss-security/2017/10/04/9 https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524 https://kanboard.net/news/version-1.0.47 • CWE-639: Authorization Bypass Through User-Controlled Key •
CVSS: 4.3EPSS: 0%CPEs: 51EXPL: 0CVE-2017-15207
https://notcve.org/view.php?id=CVE-2017-15207
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tasks of a private project of another user. En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede editar tareas de un proyecto privado de otro usuario. • http://openwall.com/lists/oss-security/2017/10/04/9 https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524 https://kanboard.net/news/version-1.0.47 • CWE-639: Authorization Bypass Through User-Controlled Key •