Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: usekaneo Clear all filters
TI-2025-43914 CVE-2025-71433 · GHSA-qrhr-48pv-72cv

Missing authorization in Kaneo exposes other workspaces

Priority HIGH 69

Kaneo before 2.1.6 contains a missing authorization vulnerability that allows authenticated users to access other workspaces by supplying project, task, label or workspace identifiers to API routes lacking membership che…

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00572 Published 2026-10-14 Fixed in 2.1.6 CWE-862
TI-2026-45053 CVE-2026-63104

Kaneo 2.3.12 < 2.12.2 Missing Authorization via Bulk Task Endpoint

Priority HIGH 65

Kaneo versions 2.3.12 before 2.12.2 contain a missing authorization vulnerability that allows authenticated workspace members with viewer or member roles to delete and modify tasks beyond their assigned permissions by ex…

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00488 Published 2026-09-22 Fixed in 2.12.2 CWE-862