CVE-2024-36399: Kanboard is project management software that focuses on the Kanban methodology. The vuln is in app/Controller/ProjectPermissionController.php function…

PriorityP337medium6.3CVSS 3.1

AVNACLPRLUINSUCLILAL

EPSS

0.35%

27.5th percentile

Kanboard is project management software that focuses on the Kanban methodology. The vuln is in app/Controller/ProjectPermissionController.php function addUser(). The users permission to add users to a project only get checked on the URL parameter project_id. If the user is authorized to add users to this project the request gets processed. The users permission for the POST BODY parameter project_id does not get checked again while processing. An attacker with the 'Project Manager' on a single project may take over any other project. The vulnerability is fixed in 1.2.37.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
debian	kanboard	< kanboard 1.2.44+ds-1 (forky)	kanboard 1.2.44+ds-1 (forky)
kanboard	kanboard	< 1.2.37	1.2.37
kanboard	kanboard	—	—
kanboard	kanboard	>= 0 < 1.2.44+ds-1	1.2.44+ds-1

CVSS provenance

nvdv3.16.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

osv6.3MEDIUM

vendor_debian8.2HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.