CVSS: 4.3EPSS: 0%CPEs: 51EXPL: 0CVE-2017-15204
https://notcve.org/view.php?id=CVE-2017-15204
In Kanboard before 1.0.47, by altering form data, an authenticated user can add automatic actions to a private project of another user. En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede añadir acciones automáticas a un proyecto privado de otro usuario. • http://openwall.com/lists/oss-security/2017/10/04/9 https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524 https://kanboard.net/news/version-1.0.47 • CWE-639: Authorization Bypass Through User-Controlled Key •
CVSS: 4.3EPSS: 0%CPEs: 51EXPL: 0CVE-2017-15211
https://notcve.org/view.php?id=CVE-2017-15211
In Kanboard before 1.0.47, by altering form data, an authenticated user can add an external link to a private project of another user. En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede añadir un enlace interno a un proyecto privado de otro usuario. • http://openwall.com/lists/oss-security/2017/10/04/9 https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524 https://kanboard.net/news/version-1.0.47 • CWE-639: Authorization Bypass Through User-Controlled Key •
CVSS: 4.3EPSS: 0%CPEs: 51EXPL: 0CVE-2017-15197
https://notcve.org/view.php?id=CVE-2017-15197
In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new category to a private project of another user. En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede añadir una nueva categoría a un proyecto privado de otro usuario. • http://openwall.com/lists/oss-security/2017/10/04/9 https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524 https://kanboard.net/news/version-1.0.47 • CWE-639: Authorization Bypass Through User-Controlled Key •
CVSS: 4.3EPSS: 0%CPEs: 51EXPL: 0CVE-2017-15200
https://notcve.org/view.php?id=CVE-2017-15200
In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new task to a private project of another user. En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede añadir una nueva tarea a un proyecto privado de otro usuario. • http://openwall.com/lists/oss-security/2017/10/04/9 https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524 https://kanboard.net/news/version-1.0.47 • CWE-639: Authorization Bypass Through User-Controlled Key •
CVSS: 4.3EPSS: 0%CPEs: 51EXPL: 0CVE-2017-15196
https://notcve.org/view.php?id=CVE-2017-15196
In Kanboard before 1.0.47, by altering form data, an authenticated user can remove columns from a private project of another user. En Kanboard en versiones anteriores a 1.0.47, al alterar los datos del formulario, un usuario autenticado puede eliminar columnas de un proyecto privado de otro usuario. • http://openwall.com/lists/oss-security/2017/10/04/9 https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0 https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524 https://kanboard.net/news/version-1.0.47 • CWE-639: Authorization Bypass Through User-Controlled Key •