CVSS: 4.3EPSS: 0%CPEs: 51EXPL: 0CVE-2017-15205
https://notcve.org/view.php?id=CVE-2017-15205
In Kanboard before 1.0.47, by altering form data, an authenticated user can download attachments from a private project of another user. En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede descargar adjuntos de un proyecto privado de otro usuario. • http://openwall.com/lists/oss-security/2017/10/04/9 https://github.com/kanboard/kanboard/commit/7100f6de8a1f566e260b3e65312767e4cde112b1 https://kanboard.net/news/version-1.0.47 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.3EPSS: 0%CPEs: 51EXPL: 0CVE-2017-15201
https://notcve.org/view.php?id=CVE-2017-15201
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tags of a private project of another user. En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede editar etiquetas de un proyecto privado de otro usuario. • http://openwall.com/lists/oss-security/2017/10/04/9 https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524 https://kanboard.net/news/version-1.0.47 • CWE-639: Authorization Bypass Through User-Controlled Key •
CVSS: 4.3EPSS: 0%CPEs: 51EXPL: 0CVE-2017-15203
https://notcve.org/view.php?id=CVE-2017-15203
In Kanboard before 1.0.47, by altering form data, an authenticated user can remove categories from a private project of another user. En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede eliminar categorías de un proyecto privado de otro usuario. • http://openwall.com/lists/oss-security/2017/10/04/9 https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524 https://kanboard.net/news/version-1.0.47 • CWE-639: Authorization Bypass Through User-Controlled Key •
CVSS: 4.3EPSS: 0%CPEs: 51EXPL: 0CVE-2017-15209
https://notcve.org/view.php?id=CVE-2017-15209
In Kanboard before 1.0.47, by altering form data, an authenticated user can remove attachments from a private project of another user. En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede eliminar adjuntos de un proyecto privado de otro usuario. • http://openwall.com/lists/oss-security/2017/10/04/9 https://github.com/kanboard/kanboard/commit/7100f6de8a1f566e260b3e65312767e4cde112b1 https://kanboard.net/news/version-1.0.47 • CWE-639: Authorization Bypass Through User-Controlled Key •
CVSS: 4.3EPSS: 0%CPEs: 51EXPL: 0CVE-2017-15198
https://notcve.org/view.php?id=CVE-2017-15198
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit a category of a private project of another user. En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede editar una categoría de un proyecto privado de otro usuario. • http://openwall.com/lists/oss-security/2017/10/04/9 https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524 https://kanboard.net/news/version-1.0.47 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •