kanboard kayıtları

kanboard üreticisine ait 48 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %54,2
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

48 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
36İzleyin	CVE-2026-21881İstismar yok	Kanboard is Vulnerable to Reverse Proxy Authentication Bypasskanboard · kanboard · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,1	—	%0,5	7 Oca 2026
35İzleyin	CVE-2017-12850İstismar yok	An authenticated standard user could reset the password of other users (including the admin) by altering form data.kanboard · kanboard · CWE-640	Yüksek8,8	—	%1,3	14 Ağu 2017
35İzleyin	CVE-2017-12851İstismar yok	An authenticated standard user could reset the password of the admin by altering form data.kanboard · kanboard · CWE-640	Yüksek8,8	—	%1,3	14 Ağu 2017
35İzleyin	CVE-2023-36813İstismar yok	Kanboard Authenticated SQL Injections vulnerabilitykanboard · kanboard · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,9	5 Tem 2023
35İzleyin	CVE-2025-52560İstismar yok	Kanboard Password Reset Poisoning via Host Header Injectionkanboard · kanboard · CWE-640 Kimlik doğrulamasız	Yüksek8,8	—	%0,5	23 Haz 2025
33İzleyin	CVE-2026-25924Kavram kanıtı	Kanboard is Missing Access Control on Plugin Installation leading to Administrative RCEkanboard · kanboard · CWE-863 RCE Erişim denetimi (IDOR)	Yüksek8,4	—	%0,8	11 Şub 2026
33İzleyin	CVE-2026-33058İstismar yok	Kanboard has Authenticated SQL Injection in Project Permissions Handlerkanboard · kanboard · CWE-89 SQL enjeksiyonu	Yüksek8,4	—	%0,4	18 Mar 2026
32İzleyin	CVE-2026-24885İstismar yok	Kanboard Affected by Cross-Site Request Forgery (CSRF) via Content-Type Misconfiguration in Project Role Assignmentkanboard · kanboard · CWE-352 CSRF	Yüksek8,0	—	%0,2	10 Şub 2026
28İzleyin	CVE-2024-51748İstismar yok	Remote code execution through language setting in kanboardkanboard · kanboard · CWE-22 RCE Yol geçişi	Yüksek7,2	—	%0,9	11 Kas 2024
28İzleyin	CVE-2025-55010İstismar yok	Kanboard Authenticated Admin Remote Code Execution via Unsafe Deserialization of Eventskanboard · kanboard · CWE-502 RCE Deserializasyon	Yüksek7,2	—	%0,9	12 Ağu 2025
28İzleyin	CVE-2024-51747Kavram kanıtı	Arbitrary File Read and Delete in kanboardkanboard · kanboard · CWE-22 Yol geçişi	Yüksek7,2	—	%0,8	11 Kas 2024
28İzleyin	CVE-2026-29056İstismar yok	Kanboard's privilege escalation via mass assignment in user invite registration allows any invited user to become adminkanboard · kanboard · CWE-915	Yüksek7,0	—	%0,6	17 Mar 2026
27İzleyin	CVE-2014-3920İstismar yok	Cross-site request forgery (CSRF) vulnerability in Kanboard before 1.0.6 allows remote attackers to hijack the authentication of administratkanboard · kanboard · CWE-352 Kimlik doğrulamasız CSRF	Orta6,8	—	%0,7	3 Tem 2014
26İzleyin	CVE-2023-33956İstismar yok	Parameter based Indirect Object Referencing leading to private file exposure in Kanboardkanboard · kanboard · CWE-200 Erişim denetimi (IDOR) Bilgi sızıntısı	Orta6,5	—	%0,6	5 Haz 2023
26İzleyin	CVE-2023-33970İstismar yok	Missing access control in internal task links feature in Kanboardkanboard · kanboard · CWE-862 Erişim denetimi (IDOR)	Orta6,5	—	%0,5	5 Haz 2023
26İzleyin	CVE-2024-55603İstismar yok	Insufficient session invalidation in Kanboardkanboard · kanboard · CWE-613 Kimlik doğrulamasız	Orta6,5	—	%0,5	18 Ara 2024
25İzleyin	CVE-2024-36399İstismar yok	Kanboard affected by Project Takeover via IDOR in ProjectPermissionControllerkanboard · kanboard · CWE-284 Erişim denetimi (IDOR)	Orta6,3	—	%0,4	6 Haz 2024
24İzleyin	CVE-2019-7324İstismar yok	app/Core/Paginator.php in Kanboard before 1.2.8 has XSS in pagination sorting.kanboard · kanboard · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%1,3	4 Şub 2019
24İzleyin	CVE-2026-21879İstismar yok	Kanboard vulnerable to Open Redirect via protocol-relative URLskanboard · kanboard · CWE-601 Kimlik doğrulamasız Açık yönlendirme	Orta6,1	—	%0,3	7 Oca 2026
22İzleyin	CVE-2024-54001İstismar yok	Kanboard allows a persistent HTML injection site scripting in settings page date formatkanboard · kanboard · CWE-80 XSS	Orta5,5	—	%0,4	5 Ara 2024
21İzleyin	CVE-2023-32685İstismar yok	Clipboard based cross-site scripting (blocked with default CSP) in Kanboardkanboard · kanboard · CWE-79 XSS	Orta5,4	—	%0,5	30 May 2023
21İzleyin	CVE-2023-33969İstismar yok	Stored Cross site scripting in the Task External Link Functionality in Kanboardkanboard · kanboard · CWE-79 RCE XSS	Orta5,4	—	%0,5	5 Haz 2023
21İzleyin	CVE-2026-21880İstismar yok	Kanboard LDAP Injection Vulnerability can Lead to User Enumeration and Information Disclosurekanboard · kanboard · CWE-90 Kimlik doğrulamasız	Orta5,3	—	%0,4	7 Oca 2026
21İzleyin	CVE-2023-33968İstismar yok	Missing Access Control allows User to move and duplicate tasks in Kanboardkanboard · kanboard · CWE-862 Erişim denetimi (IDOR)	Orta5,4	—	%0,4	5 Haz 2023
21İzleyin	CVE-2025-55011İstismar yok	Kanboard Path Traversal in File Write via Task File Upload Apikanboard · kanboard · CWE-22 Kimlik doğrulamasız Yol geçişi	Orta5,3	—	%0,4	12 Ağu 2025

CVE-2026-21881
36İzleyin
Kanboard is Vulnerable to Reverse Proxy Authentication Bypass
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
kanboard · kanboard7 Oca 2026
CVE-2017-12850
35İzleyin
An authenticated standard user could reset the password of other users (including the admin) by altering form data.
YüksekCVSS 8,8İstismar yokEPSS %1
kanboard · kanboard14 Ağu 2017
CVE-2017-12851
35İzleyin
An authenticated standard user could reset the password of the admin by altering form data.
YüksekCVSS 8,8İstismar yokEPSS %1
kanboard · kanboard14 Ağu 2017
CVE-2023-36813
35İzleyin
Kanboard Authenticated SQL Injections vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
kanboard · kanboard5 Tem 2023
CVE-2025-52560
35İzleyin
Kanboard Password Reset Poisoning via Host Header Injection
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulamasız
kanboard · kanboard23 Haz 2025
CVE-2026-25924
33İzleyin
Kanboard is Missing Access Control on Plugin Installation leading to Administrative RCE
YüksekCVSS 8,4Kavram kanıtıEPSS %1
- RCE
- Erişim denetimi (IDOR)
kanboard · kanboard11 Şub 2026
CVE-2026-33058
33İzleyin
Kanboard has Authenticated SQL Injection in Project Permissions Handler
YüksekCVSS 8,4İstismar yokEPSS %0
- SQL enjeksiyonu
kanboard · kanboard18 Mar 2026
CVE-2026-24885
32İzleyin
Kanboard Affected by Cross-Site Request Forgery (CSRF) via Content-Type Misconfiguration in Project Role Assignment
YüksekCVSS 8,0İstismar yokEPSS %0
- CSRF
kanboard · kanboard10 Şub 2026
CVE-2024-51748
28İzleyin
Remote code execution through language setting in kanboard
YüksekCVSS 7,2İstismar yokEPSS %1
- RCE
- Yol geçişi
kanboard · kanboard11 Kas 2024
CVE-2025-55010
28İzleyin
Kanboard Authenticated Admin Remote Code Execution via Unsafe Deserialization of Events
YüksekCVSS 7,2İstismar yokEPSS %1
- RCE
- Deserializasyon
kanboard · kanboard12 Ağu 2025
CVE-2024-51747
28İzleyin
Arbitrary File Read and Delete in kanboard
YüksekCVSS 7,2Kavram kanıtıEPSS %1
- Yol geçişi
kanboard · kanboard11 Kas 2024
CVE-2026-29056
28İzleyin
Kanboard's privilege escalation via mass assignment in user invite registration allows any invited user to become admin
YüksekCVSS 7,0İstismar yokEPSS %1
kanboard · kanboard17 Mar 2026
CVE-2014-3920
27İzleyin
Cross-site request forgery (CSRF) vulnerability in Kanboard before 1.0.6 allows remote attackers to hijack the authentication of administrat
OrtaCVSS 6,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- CSRF
kanboard · kanboard3 Tem 2014
CVE-2023-33956
26İzleyin
Parameter based Indirect Object Referencing leading to private file exposure in Kanboard
OrtaCVSS 6,5İstismar yokEPSS %1
- Erişim denetimi (IDOR)
- Bilgi sızıntısı
kanboard · kanboard5 Haz 2023
CVE-2023-33970
26İzleyin
Missing access control in internal task links feature in Kanboard
OrtaCVSS 6,5İstismar yokEPSS %1
- Erişim denetimi (IDOR)
kanboard · kanboard5 Haz 2023
CVE-2024-55603
26İzleyin
Insufficient session invalidation in Kanboard
OrtaCVSS 6,5İstismar yokEPSS %1
- Kimlik doğrulamasız
kanboard · kanboard18 Ara 2024
CVE-2024-36399
25İzleyin
Kanboard affected by Project Takeover via IDOR in ProjectPermissionController
OrtaCVSS 6,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
kanboard · kanboard6 Haz 2024
CVE-2019-7324
24İzleyin
app/Core/Paginator.php in Kanboard before 1.2.8 has XSS in pagination sorting.
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
kanboard · kanboard4 Şub 2019
CVE-2026-21879
24İzleyin
Kanboard vulnerable to Open Redirect via protocol-relative URLs
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Açık yönlendirme
kanboard · kanboard7 Oca 2026
CVE-2024-54001
22İzleyin
Kanboard allows a persistent HTML injection site scripting in settings page date format
OrtaCVSS 5,5İstismar yokEPSS %0
- XSS
kanboard · kanboard5 Ara 2024
CVE-2023-32685
21İzleyin
Clipboard based cross-site scripting (blocked with default CSP) in Kanboard
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
kanboard · kanboard30 May 2023
CVE-2023-33969
21İzleyin
Stored Cross site scripting in the Task External Link Functionality in Kanboard
OrtaCVSS 5,4İstismar yokEPSS %1
- RCE
- XSS
kanboard · kanboard5 Haz 2023
CVE-2026-21880
21İzleyin
Kanboard LDAP Injection Vulnerability can Lead to User Enumeration and Information Disclosure
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
kanboard · kanboard7 Oca 2026
CVE-2023-33968
21İzleyin
Missing Access Control allows User to move and duplicate tasks in Kanboard
OrtaCVSS 5,4İstismar yokEPSS %0
- Erişim denetimi (IDOR)
kanboard · kanboard5 Haz 2023
CVE-2025-55011
21İzleyin
Kanboard Path Traversal in File Write via Task File Upload Api
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Yol geçişi
kanboard · kanboard12 Ağu 2025