Vulnerabilidades em kanboard

28 resultados
Análise Vexday

Kanboard acumula 27 vulnerabilidades catalogadas, com 4 classificadas como críticas, embora nenhuma esteja sob exploração ativa conhecida no momento. A fraqueza dominante (CWE-639) aponta para falhas de autorização, representando o vetor de risco estrutural do produto; o ritmo recente de 2 divulgações nos últimos 90 dias sugere que correções continuam sendo necessárias.

CVE-2025-52576MEDIUMKanboard vulnerable to Username Enumeration via Login Behavior and Bruteforce Protection BypassEPSS 0.3%CVE-2026-57862HIGHKanboard 1.2.52 and prior SSRF Filter Bypass via Hexadecimal IP NotationEPSS 0.3%CVE-2026-33058HIGHKanboard has Authenticated SQL Injection in Project Permissions HandlerEPSS 0.3%CVE-2026-56774MEDIUMKanboard - Cross-User Deletion of Persistent Login Sessions via Unvalidated Session IDEPSS 0.3%CVE-2026-21879MEDIUMKanboard vulnerable to Open Redirect via protocol-relative URLsEPSS 0.3%CVE-2026-25530MEDIUMKanboard is missing authorization check in getSwimlane API allows cross-project data accessEPSS 0.2%CVE-2026-25531MEDIUMKanboard TaskCreationController::duplicateProjects() endpoint does not validate user permissions for target projectsEPSS 0.2%CVE-2026-24885MEDIUMKanboard Affected by Cross-Site Request Forgery (CSRF) via Content-Type Misconfiguration in Project Role AssignmentEPSS 0.2%