Vulnerabilities

TI-2026-25501 CVE-2026-33058

Kanboard has Authenticated SQL Injection in Project Permissions Handler

HIGH 70

Kanboard is project management software focused on Kanban methodology.

CVSS 4.0HIGH 8.4 Network Low privileges No interaction EPSS 0.00292 Published 2026-03-18 Fixed in 1.2.51 CWE-89

TI-2026-23201 CVE-2026-29056

Kanboard's privilege escalation via mass assignment in user invite registration allows any invited user to become admin

HIGH 70

Kanboard is project management software focused on Kanban methodology.

CVSS 4.0HIGH 7.0 Network Low privileges No interaction EPSS 0.00393 Published 2026-03-18 Fixed in 1.2.51 CWE-915

TI-2026-20640 CVE-2026-25531

Kanboard TaskCreationController::duplicateProjects() endpoint does not validate user permissions for target projects

MEDIUM 53

Kanboard is project management software focused on Kanban methodology.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00259 Published 2026-02-13 Fixed in 1.2.50 CWE-862

TI-2026-20954 CVE-2026-25924

Kanboard is Missing Access Control on Plugin Installation leading to Administrative RCE

HIGH 72

Kanboard is project management software focused on Kanban methodology.

CVSS 3.1HIGH 8.5 Network High privileges User interaction EPSS 0.00598 Published 2026-02-11 Fixed in 1.2.50 CWE-863

TI-2026-20639 CVE-2026-25530

Kanboard is missing authorization check in getSwimlane API allows cross-project data access

MEDIUM 53

Kanboard is project management software focused on Kanban methodology.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00279 Published 2026-02-10 Fixed in 1.2.50 CWE-639

TI-2026-20071 CVE-2026-24885

Kanboard Affected by Cross-Site Request Forgery (CSRF) via Content-Type Misconfiguration in Project Role Assignment

HIGH 68

Kanboard is project management software focused on Kanban methodology.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00221 Published 2026-02-10 Fixed in 1.2.50 CWE-352

TI-2026-17582 CVE-2026-21881

Kanboard is Vulnerable to Reverse Proxy Authentication Bypass

HIGH 80

Kanboard is project management software focused on Kanban methodology.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00486 Published 2026-01-08 Fixed in 1.2.49 CWE-287

TI-2026-17581 CVE-2026-21880

Kanboard LDAP Injection Vulnerability can Lead to User Enumeration and Information Disclosure

MEDIUM 63

Kanboard is project management software focused on Kanban methodology.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00396 Published 2026-01-08 Fixed in 1.2.49 CWE-200

TI-2026-17580 CVE-2026-21879

Kanboard vulnerable to Open Redirect via protocol-relative URLs

MEDIUM 60

Kanboard is project management software focused on Kanban methodology.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00311 Published 2026-01-08 Fixed in 1.2.49 CWE-601

TI-2025-34713 CVE-2025-55010

Kanboard Authenticated Admin Remote Code Execution via Unsafe Deserialization of Events

HIGH 74

Kanboard is project management software that focuses on the Kanban methodology.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01013 Published 2025-08-12 Fixed in 1.2.47 CWE-502

TI-2025-34714 CVE-2025-55011

Kanboard Path Traversal in File Write via Task File Upload Api

MEDIUM 62

Kanboard is project management software that focuses on the Kanban methodology.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00394 Published 2025-08-12 Fixed in 1.2.47 CWE-22

TI-2025-32671 CVE-2025-52576

Kanboard vulnerable to Username Enumeration via Login Behavior and Bruteforce Protection Bypass

MEDIUM 63

Kanboard is project management software that focuses on the Kanban methodology.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00355 Published 2025-06-25 Fixed in 1.2.46 CWE-203

TI-2025-32655 CVE-2025-52560

Kanboard Password Reset Poisoning via Host Header Injection

HIGH 73

Kanboard is project management software that focuses on the Kanban methodology.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00518 Published 2025-06-24 Fixed in 1.2.46 CWE-640

TI-2025-29458 CVE-2025-46825

Kanboard has stored Cross-site Scripting vulnerability in project name

MEDIUM 41

Kanboard is project management software that focuses on the Kanban methodology.

CVSS 4.0LOW 1.3 Network No auth User interaction EPSS 0.00361 Published 2025-05-12 Fixed in 1.2.45 CWE-79

TI-2024-36912 CVE-2024-55603

Insufficient session invalidation in Kanboard

LOW 35

Kanboard is project management software that focuses on the Kanban methodology.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00515 Published 2024-12-18 Fixed in 1.2.43 CWE-613

TI-2024-36156 CVE-2024-54001

Kanboard allows a persistent HTML injection site scripting in settings page date format

MEDIUM 58

Kanboard is project management software that focuses on the Kanban methodology.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00392 Published 2024-12-05 Fixed in 1.2.41 CWE-80

TI-2024-34652 CVE-2024-51747

Arbitrary File Read and Delete in kanboard

HIGH 74

Kanboard is project management software that focuses on the Kanban methodology.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00847 Published 2024-11-11 Fixed in 1.2.42 CWE-22

TI-2024-34653 CVE-2024-51748

Remote code execution through language setting in kanboard

HIGH 74

Kanboard is project management software that focuses on the Kanban methodology.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00944 Published 2024-11-11 Fixed in 1.2.42 CWE-22

TI-2024-24185 CVE-2024-36399

Kanboard affected by Project Takeover via IDOR in ProjectPermissionController

LOW 38

Kanboard is project management software that focuses on the Kanban methodology.

CVSS 3.1HIGH 8.2 Network Low privileges No interaction EPSS 0.00353 Published 2024-06-06 No fix listed CWE-284

TI-2024-15111 CVE-2024-22720 · GHSA-xc7v-9m4q-8q68

Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature.

MEDIUM 55

Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00395 Published 2024-01-24 No fix listed CWE-79

TI-2023-18607 CVE-2023-36813

Kanboard Authenticated SQL Injections vulnerability

HIGH 71

Kanboard is project management software that focuses on the Kanban methodology.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00923 Published 2023-07-05 Fixed in 1.2.31 CWE-89

TI-2023-16837 CVE-2023-33969

Stored Cross site scripting in the Task External Link Functionality in Kanboard

MEDIUM 62

Kanboard is open source project management software that focuses on the Kanban methodology.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00507 Published 2023-06-05 Fixed in 1.2.30 CWE-79

TI-2023-16838 CVE-2023-33970

Missing access control in internal task links feature in Kanboard

MEDIUM 62

Kanboard is open source project management software that focuses on the Kanban methodology.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00516 Published 2023-06-05 Fixed in 1.2.30 CWE-862

TI-2023-16836 CVE-2023-33968

Missing Access Control allows User to move and duplicate tasks in Kanboard

MEDIUM 58

Kanboard is open source project management software that focuses on the Kanban methodology.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00382 Published 2023-06-05 Fixed in 1.2.30 CWE-862

TI-2023-16824 CVE-2023-33956

Parameter based Indirect Object Referencing leading to private file exposure in Kanboard

MEDIUM 62

Kanboard is open source project management software that focuses on the Kanban methodology.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00625 Published 2023-06-05 Fixed in 1.2.30 CWE-200

Vulnerabilities

Filters