Cross-Site Scripting in Kanboard by Kanboard Inc.
CVE-2019-7324

6.1MEDIUM

Key Information:

Vendor
Kanboard
Status
Kanboard
Vendor
CVE Published:
4 February 2019

Summary

In Kanboard versions prior to 1.2.8, a vulnerability exists in the app/Core/Paginator.php file that allows for Cross-Site Scripting (XSS) attacks via pagination sorting. This security flaw can be exploited by an attacker to inject malicious scripts, potentially affecting users who interact with the pagination features. It is crucial for users of affected Kanboard versions to apply the latest security updates to mitigate this risk.

References

https://github.com/kanboard/kanboard/commit/83deec2e3621c...
x_refsource_MISC
https://github.com/kanboard/kanboard/releases/tag/v1.2.8
x_refsource_MISC
http://packetstormsecurity.com/files/153093/Kanboard-1.2....
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.