Priority HIGH 70
Kanboard 1.2.52 and prior contains a server-side request forgery vulnerability that allows authenticated users to bypass SSRF protections by supplying hexadecimal IP address notation in user-controlled URLs.
CVSS 4.0HIGH 8.4· Network · Low privileges · No interaction · EPSS 0.00412 · Published 2026-07-30 · No fix listed CWE-918
Priority HIGH 65
Kanboard before 1.2.53, fixed in commit 564cc30, BoardAjaxController save() method (used by the kanban board drag-and-drop endpoint) validates the caller's role on the attacker-supplied project_id but never verifies that…
CVSS 4.0HIGH 7.2· Network · Low privileges · No interaction · EPSS 0.00504 · Published 2026-07-15 · Fixed in 1.2.53 CWE-639
Priority MEDIUM 57
Kanboard through 1.2.52, fixed in commit 928c68a, UserViewController::removeSession fails to validate the session id parameter before passing it to RememberMeSessionModel::remove, allowing authenticated users to delete o…
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00477 · Published 2026-06-25 · Fixed CWE-639
Priority HIGH 70
Kanboard is project management software focused on Kanban methodology.
CVSS 4.0HIGH 8.4· Network · Low privileges · No interaction · EPSS 0.00292 · Published 2026-03-18 · Fixed in 1.2.51 CWE-89
Priority HIGH 70
Kanboard is project management software focused on Kanban methodology.
CVSS 4.0HIGH 7.0· Network · Low privileges · No interaction · EPSS 0.00393 · Published 2026-03-18 · Fixed in 1.2.51 CWE-915
Priority MEDIUM 53
Kanboard is project management software focused on Kanban methodology.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00259 · Published 2026-02-13 · Fixed in 1.2.50 CWE-862
Priority HIGH 72
Kanboard is project management software focused on Kanban methodology.
CVSS 3.1HIGH 8.5· Network · High privileges · User interaction · EPSS 0.00598 · Published 2026-02-11 · Fixed in 1.2.50 CWE-863
Priority MEDIUM 53
Kanboard is project management software focused on Kanban methodology.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00279 · Published 2026-02-10 · Fixed in 1.2.50 CWE-639
Priority HIGH 68
Kanboard is project management software focused on Kanban methodology.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00221 · Published 2026-02-10 · Fixed in 1.2.50 CWE-352
Priority HIGH 80
Kanboard is project management software focused on Kanban methodology.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00486 · Published 2026-01-08 · Fixed in 1.2.49 CWE-287
Priority MEDIUM 63
Kanboard is project management software focused on Kanban methodology.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00396 · Published 2026-01-08 · Fixed in 1.2.49 CWE-200
Priority MEDIUM 60
Kanboard is project management software focused on Kanban methodology.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00311 · Published 2026-01-08 · Fixed in 1.2.49 CWE-601
Priority HIGH 74
Kanboard is project management software that focuses on the Kanban methodology.
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.01013 · Published 2025-08-12 · Fixed in 1.2.47 CWE-502
Priority MEDIUM 62
Kanboard is project management software that focuses on the Kanban methodology.
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00394 · Published 2025-08-12 · Fixed in 1.2.47 CWE-22
Priority MEDIUM 63
Kanboard is project management software that focuses on the Kanban methodology.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00355 · Published 2025-06-25 · Fixed in 1.2.46 CWE-203
Priority HIGH 73
Kanboard is project management software that focuses on the Kanban methodology.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00518 · Published 2025-06-24 · Fixed in 1.2.46 CWE-640
Priority MEDIUM 41
Kanboard is project management software that focuses on the Kanban methodology.
CVSS 4.0LOW 1.3· Network · No auth · User interaction · EPSS 0.00361 · Published 2025-05-12 · Fixed in 1.2.45 CWE-79
Priority LOW 35
Kanboard is project management software that focuses on the Kanban methodology.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00515 · Published 2024-12-18 · Fixed in 1.2.43 CWE-613
Priority MEDIUM 58
Kanboard is project management software that focuses on the Kanban methodology.
CVSS 3.1MEDIUM 5.5· Network · High privileges · No interaction · EPSS 0.00392 · Published 2024-12-05 · Fixed in 1.2.41 CWE-80
Priority HIGH 74
Kanboard is project management software that focuses on the Kanban methodology.
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.00847 · Published 2024-11-11 · Fixed in 1.2.42 CWE-22
Priority HIGH 74
Kanboard is project management software that focuses on the Kanban methodology.
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.00944 · Published 2024-11-11 · Fixed in 1.2.42 CWE-22
Priority LOW 38
Kanboard is project management software that focuses on the Kanban methodology.
CVSS 3.1HIGH 8.2· Network · Low privileges · No interaction · EPSS 0.00353 · Published 2024-06-06 · No fix listed CWE-284
Priority MEDIUM 55
Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00395 · Published 2024-01-24 · No fix listed CWE-79
Priority HIGH 71
Kanboard is project management software that focuses on the Kanban methodology.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00923 · Published 2023-07-05 · Fixed in 1.2.31 CWE-89
Priority MEDIUM 62
Kanboard is open source project management software that focuses on the Kanban methodology.
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00507 · Published 2023-06-05 · Fixed in 1.2.30 CWE-79
Load more
THREATIST.IORead the docs