CVE-2017-12850

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An authenticated standard user could reset the password of other users (including the admin) by altering form data. Affects kanboard before 1.0.46.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-640

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Aug 14, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-128518.8An authenticated standard user could reset the password of the admin by altering form data. Affects kanboard before 1.0.46.CVE-2017-128527.5The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite CVE-2017-128538.8The RealTime RWR-3G-100 Router Firmware Version : Ver1.0.56 is affected by CSRF an attack that forces an end user to execute unwanted actionCVE-2017-128556.5Xen maintains the _GTF_{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. A guest is expected not to modify theCVE-2017-128566.1Cross-site scripting (XSS) vulnerability in C.P.Sub 5.2 allows remote attackers to inject arbitrary web script or HTML via the keyword paramCVE-2017-128578.8Polycom SoundStation IP, VVX, and RealPresence Trio that are running software older than UCS 4.0.12, 5.4.5 rev AG, 5.4.7, 5.5.2, or 5.6.0 arCVE-2017-128589.8Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecified impact via unknownCVE-2017-128595.9NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS environments, allows remote attackers to cause a denial of service via unspeCVE-2017-12866.5Sensitive information about the configuration of the IBM UrbanCode Deploy 6.1 through 6.9.6.0 server and database can be obtained by a user CVE-2017-128609.8The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using aCVE-2017-128619.8The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using aCVE-2017-128628.8In modules/imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is small than expected, which will cause copy buffer overflow l
CVE-2017-12850: High severity, CVSS 8.8 | Vulnix