Debian Kanboard vulnerabilities

CVE-2026-21881 [CRITICAL] CVE-2026-21881: kanboard - Kanboard is project management software focused on Kanban methodology. Versions ... Kanboard is project management software focused on Kanban methodology. Versions 1.2.48 and below is vulnerable to a critical authentication bypass when REVERSE_PROXY_AUTH is enabled. The application blindly trusts HTTP headers for user authentication without verifying the request originated from a trusted reverse proxy. An attacker can impersonate any user, inc

CVE-2026-29056 [HIGH] CVE-2026-29056: kanboard - Kanboard is project management software focused on Kanban methodology. Prior to ... Kanboard is project management software focused on Kanban methodology. Prior to 1.2.51, Kanboard's user invite registration endpoint (`UserInviteController::register()`) accepts all POST parameters and passes them to `UserModel::create()` without filtering out the `role` field. An attacker who receives an invite link can inject `role=app-admin` in the registration

CVE-2026-25924 [HIGH] CVE-2026-25924: kanboard - Kanboard is project management software focused on Kanban methodology. Prior to ... Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, a security control bypass vulnerability in Kanboard allows an authenticated administrator to achieve full Remote Code Execution (RCE). Although the application correctly hides the plugin installation interface when the PLUGIN_INSTALLER configuration is set to false, the underlyi

CVE-2025-52560 [HIGH] CVE-2025-52560: kanboard - Kanboard is project management software that focuses on the Kanban methodology. ... Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.46, Kanboard allows password reset emails to be sent with URLs derived from the unvalidated Host header when the application_url configuration is unset (default behavior). This allows an attacker to craft a malicious password reset link that leaks the token to an at

CVE-2023-36813 [HIGH] CVE-2023-36813: kanboard - Kanboard is project management software that focuses on the Kanban methodology. ... Kanboard is project management software that focuses on the Kanban methodology. In versions prior to 1.2.31authenticated user is able to perform a SQL Injection, leading to a privilege escalation or loss of confidentiality. It appears that in some insert and update operations, the code improperly uses the PicoDB library to update/insert new information. Version 1.2

CVE-2025-55010 [CRITICAL] CVE-2025-55010: kanboard - Kanboard is project management software that focuses on the Kanban methodology. ... Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.47, an unsafe deserialization vulnerability in the ProjectEventActvityFormatter allows admin users the ability to instantiate arbitrary php objects by modifying the event["data"] field in the project_activities table. A malicious actor can update this field to u

CVE-2024-51748 [CRITICAL] CVE-2024-51748: kanboard - Kanboard is project management software that focuses on the Kanban methodology. ... Kanboard is project management software that focuses on the Kanban methodology. An authenticated Kanboard admin can run arbitrary php code on the server in combination with a file write possibility. The user interface language is determined and loaded by the setting `application_language` in the `settings` table. Thus, an attacker who can upload a modified sqli

CVE-2024-51747 [CRITICAL] CVE-2024-51747: kanboard - Kanboard is project management software that focuses on the Kanban methodology. ... Kanboard is project management software that focuses on the Kanban methodology. An authenticated Kanboard admin can read and delete arbitrary files from the server. File attachments, that are viewable or downloadable in Kanboard are resolved through its `path` entry in the `project_has_files` SQLite db. Thus, an attacker who can upload a modified sqlite.db thro

CVE-2026-33058 [HIGH] CVE-2026-33058: kanboard - Kanboard is project management software focused on Kanban methodology. Versions ... Kanboard is project management software focused on Kanban methodology. Versions prior to 1.2.51 have an authenticated SQL injection vulnerability. Attackers with the permission to add users to a project can leverage this vulnerability to dump the entirety of the kanboard database. Version 1.2.51 fixes the issue. Scope: local forky: resolved (fixed in 1.2.51+ds-1) s

CVE-2026-24885 [MEDIUM] CVE-2026-24885: kanboard - Kanboard is project management software focused on Kanban methodology. Prior to ... Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, a Cross-Site Request Forgery (CSRF) vulnerability exists in the ProjectPermissionController within the Kanboard application. The application fails to strictly enforce the application/json Content-Type for the changeUserRole action. Although the request body is JSON, the server

CVE-2024-36399 [HIGH] CVE-2024-36399: kanboard - Kanboard is project management software that focuses on the Kanban methodology. ... Kanboard is project management software that focuses on the Kanban methodology. The vuln is in app/Controller/ProjectPermissionController.php function addUser(). The users permission to add users to a project only get checked on the URL parameter project_id. If the user is authorized to add users to this project the request gets processed. The users permission for

CVE-2023-33956 [MEDIUM] CVE-2023-33956: kanboard - Kanboard is open source project management software that focuses on the Kanban m... Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are subject to an Insecure direct object reference (IDOR) vulnerability present in the application's URL parameter. This vulnerability enables any user to read files uploaded by any other user, regardless of their privileges or restrictions. By Cha

CVE-2024-55603 [MEDIUM] CVE-2024-55603: kanboard - Kanboard is project management software that focuses on the Kanban methodology. ... Kanboard is project management software that focuses on the Kanban methodology. In affected versions sessions are still usable even though their lifetime has exceeded. Kanboard implements a cutom session handler (`app/Core/Session/SessionHandler.php`), to store the session data in a database. Therefore, when a `session_id` is given, kanboard queries the data from

CVE-2023-33970 [MEDIUM] CVE-2023-33970: kanboard - Kanboard is open source project management software that focuses on the Kanban m... Kanboard is open source project management software that focuses on the Kanban methodology. A vulnerability related to a `missing access control` was found, which allows a User with the lowest privileges to leak all the tasks and projects titles within the software, even if they are not invited or it's a personal project. This could also lead to private/critical

CVE-2026-21880 [MEDIUM] CVE-2026-21880: kanboard - Kanboard is project management software focused on Kanban methodology. Versions ... Kanboard is project management software focused on Kanban methodology. Versions 1.2.48 and below have an LDAP Injection vulnerability in the LDAP authentication mechanism. User-supplied input is directly substituted into LDAP search filters without proper sanitization, allowing attackers to enumerate all LDAP users, discover sensitive user attributes, and perform

CVE-2025-52576 [MEDIUM] CVE-2025-52576: kanboard - Kanboard is project management software that focuses on the Kanban methodology. ... Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.46, Kanboard is vulnerable to username enumeration and IP spoofing-based brute-force protection bypass. By analyzing login behavior and abusing trusted HTTP headers, an attacker can determine valid usernames and circumvent rate-limiting or blocking mechanisms. Any

CVE-2026-21879 [MEDIUM] CVE-2026-21879: kanboard - Kanboard is project management software focused on Kanban methodology. Versions ... Kanboard is project management software focused on Kanban methodology. Versions 1.2.48 and below are vulnerable to an Open Redirect attack that allows malicious actors to redirect authenticated users to attacker-controlled websites. By crafting URLs such as //evil.com, attackers can bypass the filter_var($url, FILTER_VALIDATE_URL) validation check. This vulnerabi

CVE-2023-33968 [MEDIUM] CVE-2023-33968: kanboard - Kanboard is open source project management software that focuses on the Kanban m... Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are subject to a missing access control vulnerability that allows a user with low privileges to create or transfer tasks to any project within the software, even if they have not been invited or the project is personal. The vulnerable features are

CVE-2025-55011 [MEDIUM] CVE-2025-55011: kanboard - Kanboard is project management software that focuses on the Kanban methodology. ... Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.47, the createTaskFile method in the API does not validate whether the task_id parameter is a valid task id, nor does it check for path traversal. As a result, a malicious actor could write a file anywhere on the system the app user controls. The impact is limited

CVE-2023-33969 [MEDIUM] CVE-2023-33969: kanboard - Kanboard is open source project management software that focuses on the Kanban m... Kanboard is open source project management software that focuses on the Kanban methodology. A stored Cross site scripting (XSS) allows an attacker to execute arbitrary Javascript and any user who views the task containing the malicious code will be exposed to the XSS attack. Note: The default CSP header configuration blocks this javascript attack. This issue has