kanboard

Records51All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high11CVSS 7.0–8.9

Exploited now

kanboard records in CISA KEV

No kanboard vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Kanboard 48 records HIGH

Records

51 records

TI-2026-17582 CVE-2026-21881

Kanboard is Vulnerable to Reverse Proxy Authentication Bypass

HIGH 80

Kanboard is project management software focused on Kanban methodology.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00486 Published 2026-01-08 Fixed in 1.2.49 CWE-287

TI-2025-34713 CVE-2025-55010

Kanboard Authenticated Admin Remote Code Execution via Unsafe Deserialization of Events

HIGH 74

Kanboard is project management software that focuses on the Kanban methodology.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01013 Published 2025-08-12 Fixed in 1.2.47 CWE-502

TI-2024-34653 CVE-2024-51748

Remote code execution through language setting in kanboard

HIGH 74

Kanboard is project management software that focuses on the Kanban methodology.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00944 Published 2024-11-11 Fixed in 1.2.42 CWE-22

TI-2024-34652 CVE-2024-51747

Arbitrary File Read and Delete in kanboard

HIGH 74

Kanboard is project management software that focuses on the Kanban methodology.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00847 Published 2024-11-11 Fixed in 1.2.42 CWE-22

TI-2025-32655 CVE-2025-52560

Kanboard Password Reset Poisoning via Host Header Injection

HIGH 73

Kanboard is project management software that focuses on the Kanban methodology.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00518 Published 2025-06-24 Fixed in 1.2.46 CWE-640

TI-2026-20954 CVE-2026-25924

Kanboard is Missing Access Control on Plugin Installation leading to Administrative RCE

HIGH 72

Kanboard is project management software focused on Kanban methodology.

CVSS 3.1HIGH 8.5 Network High privileges User interaction EPSS 0.00598 Published 2026-02-11 Fixed in 1.2.50 CWE-863

TI-2023-18607 CVE-2023-36813

Kanboard Authenticated SQL Injections vulnerability

HIGH 71

Kanboard is project management software that focuses on the Kanban methodology.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00923 Published 2023-07-05 Fixed in 1.2.31 CWE-89

TI-2026-41665 CVE-2026-57862 · GHSA-rj28-q96f-28vw

Kanboard 1.2.52 and prior SSRF Filter Bypass via Hexadecimal IP Notation

HIGH 70

Kanboard 1.2.52 and prior contains a server-side request forgery vulnerability that allows authenticated users to bypass SSRF protections by supplying hexadecimal IP address notation in user-controlled URLs.

CVSS 4.0HIGH 8.4 Network Low privileges No interaction EPSS 0.00412 Published 2026-07-30 No fix listed CWE-918

TI-2026-25501 CVE-2026-33058

Kanboard has Authenticated SQL Injection in Project Permissions Handler

HIGH 70

Kanboard is project management software focused on Kanban methodology.

CVSS 4.0HIGH 8.4 Network Low privileges No interaction EPSS 0.00292 Published 2026-03-18 Fixed in 1.2.51 CWE-89

TI-2026-23201 CVE-2026-29056

Kanboard's privilege escalation via mass assignment in user invite registration allows any invited user to become admin

HIGH 70

Kanboard is project management software focused on Kanban methodology.

CVSS 4.0HIGH 7.0 Network Low privileges No interaction EPSS 0.00393 Published 2026-03-18 Fixed in 1.2.51 CWE-915

TI-2026-20071 CVE-2026-24885

Kanboard Affected by Cross-Site Request Forgery (CSRF) via Content-Type Misconfiguration in Project Role Assignment

HIGH 68

Kanboard is project management software focused on Kanban methodology.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00221 Published 2026-02-10 Fixed in 1.2.50 CWE-352

TI-2026-42225 CVE-2026-58660 · GHSA-f95x-r3pv-jh63

Kanboard BoardAjaxController Missing Ownership Check via Drag-and-Drop

HIGH 65

Kanboard before 1.2.53, fixed in commit 564cc30, BoardAjaxController save() method (used by the kanban board drag-and-drop endpoint) validates the caller's role on the attacker-supplied project_id but never verifies that…

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00504 Published 2026-07-15 Fixed in 1.2.53 CWE-639

TI-2026-17581 CVE-2026-21880

Kanboard LDAP Injection Vulnerability can Lead to User Enumeration and Information Disclosure

MEDIUM 63

Kanboard is project management software focused on Kanban methodology.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00396 Published 2026-01-08 Fixed in 1.2.49 CWE-200

TI-2025-32671 CVE-2025-52576

Kanboard vulnerable to Username Enumeration via Login Behavior and Bruteforce Protection Bypass

MEDIUM 63

Kanboard is project management software that focuses on the Kanban methodology.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00355 Published 2025-06-25 Fixed in 1.2.46 CWE-203

TI-2025-34714 CVE-2025-55011

Kanboard Path Traversal in File Write via Task File Upload Api

MEDIUM 62

Kanboard is project management software that focuses on the Kanban methodology.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00394 Published 2025-08-12 Fixed in 1.2.47 CWE-22

TI-2023-16838 CVE-2023-33970

Missing access control in internal task links feature in Kanboard

MEDIUM 62

Kanboard is open source project management software that focuses on the Kanban methodology.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00516 Published 2023-06-05 Fixed in 1.2.30 CWE-862

TI-2023-16837 CVE-2023-33969

Stored Cross site scripting in the Task External Link Functionality in Kanboard

MEDIUM 62

Kanboard is open source project management software that focuses on the Kanban methodology.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00507 Published 2023-06-05 Fixed in 1.2.30 CWE-79

TI-2023-16824 CVE-2023-33956

Parameter based Indirect Object Referencing leading to private file exposure in Kanboard

MEDIUM 62

Kanboard is open source project management software that focuses on the Kanban methodology.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00625 Published 2023-06-05 Fixed in 1.2.30 CWE-200

TI-2026-17580 CVE-2026-21879

Kanboard vulnerable to Open Redirect via protocol-relative URLs

MEDIUM 60

Kanboard is project management software focused on Kanban methodology.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00311 Published 2026-01-08 Fixed in 1.2.49 CWE-601

TI-2024-36156 CVE-2024-54001

Kanboard allows a persistent HTML injection site scripting in settings page date format

MEDIUM 58

Kanboard is project management software that focuses on the Kanban methodology.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00392 Published 2024-12-05 Fixed in 1.2.41 CWE-80

TI-2023-16836 CVE-2023-33968

Missing Access Control allows User to move and duplicate tasks in Kanboard

MEDIUM 58

Kanboard is open source project management software that focuses on the Kanban methodology.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00382 Published 2023-06-05 Fixed in 1.2.30 CWE-862

TI-2026-40938 CVE-2026-56774 · GHSA-vvjm-mjq4-27c8

Kanboard - Cross-User Deletion of Persistent Login Sessions via Unvalidated Session ID

MEDIUM 57

Kanboard through 1.2.52, fixed in commit 928c68a, UserViewController::removeSession fails to validate the session id parameter before passing it to RememberMeSessionModel::remove, allowing authenticated users to delete o…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00477 Published 2026-06-25 Fixed CWE-639

TI-2024-15111 CVE-2024-22720 · GHSA-xc7v-9m4q-8q68

Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature.

MEDIUM 55

Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00395 Published 2024-01-24 No fix listed CWE-79

TI-2026-20640 CVE-2026-25531

Kanboard TaskCreationController::duplicateProjects() endpoint does not validate user permissions for target projects

MEDIUM 53

Kanboard is project management software focused on Kanban methodology.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00259 Published 2026-02-13 Fixed in 1.2.50 CWE-862

TI-2026-20639 CVE-2026-25530

Kanboard is missing authorization check in getSwimlane API allows cross-project data access

MEDIUM 53

Kanboard is project management software focused on Kanban methodology.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00279 Published 2026-02-10 Fixed in 1.2.50 CWE-639

Open these records in search →