Authentication Bypass Vulnerability in Kanboard by Kanboard

CVE-2017-15206

Summary

An authentication bypass vulnerability exists in Kanboard versions prior to 1.0.47. This issue allows an authenticated user to manipulate form data and gain unauthorized access to a private project belonging to another user. By modifying the parameters sent with a request, an authenticated attacker could create internal links that lead to sensitive project information, potentially compromising user privacy and data security.

References