CVSS: 4.3EPSS: 0%CPEs: 51EXPL: 0CVE-2017-15202
https://notcve.org/view.php?id=CVE-2017-15202
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit columns of a private project of another user. En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede editar columnas de un proyecto privado de otro usuario. • http://openwall.com/lists/oss-security/2017/10/04/9 https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524 https://kanboard.net/news/version-1.0.47 • CWE-639: Authorization Bypass Through User-Controlled Key •
CVSS: 4.3EPSS: 0%CPEs: 51EXPL: 0CVE-2017-15199
https://notcve.org/view.php?id=CVE-2017-15199
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit metadata of a private project of another user, as demonstrated by Name, Email, Identifier, and Description. En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede editar metadatos de un proyecto privado de otro usuario, tal y como demuestra Name, Email, Identifier y Description. • http://openwall.com/lists/oss-security/2017/10/04/9 https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524 https://kanboard.net/news/version-1.0.47 • CWE-639: Authorization Bypass Through User-Controlled Key •
CVSS: 4.3EPSS: 0%CPEs: 51EXPL: 0CVE-2017-15210
https://notcve.org/view.php?id=CVE-2017-15210
In Kanboard before 1.0.47, by altering form data, an authenticated user can see thumbnails of pictures from a private project of another user. En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede ver miniaturas de imágenes de un proyecto privado de otro usuario. • http://openwall.com/lists/oss-security/2017/10/04/9 https://github.com/kanboard/kanboard/commit/7100f6de8a1f566e260b3e65312767e4cde112b1 https://kanboard.net/news/version-1.0.47 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.3EPSS: 0%CPEs: 51EXPL: 0CVE-2017-15204
https://notcve.org/view.php?id=CVE-2017-15204
In Kanboard before 1.0.47, by altering form data, an authenticated user can add automatic actions to a private project of another user. En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede añadir acciones automáticas a un proyecto privado de otro usuario. • http://openwall.com/lists/oss-security/2017/10/04/9 https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524 https://kanboard.net/news/version-1.0.47 • CWE-639: Authorization Bypass Through User-Controlled Key •
CVSS: 4.3EPSS: 0%CPEs: 51EXPL: 0CVE-2017-15211
https://notcve.org/view.php?id=CVE-2017-15211
In Kanboard before 1.0.47, by altering form data, an authenticated user can add an external link to a private project of another user. En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede añadir un enlace interno a un proyecto privado de otro usuario. • http://openwall.com/lists/oss-security/2017/10/04/9 https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524 https://kanboard.net/news/version-1.0.47 • CWE-639: Authorization Bypass Through User-Controlled Key •