CVE-2017-12851

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An authenticated standard user could reset the password of the admin by altering form data. Affects kanboard before 1.0.46.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-640

Affected software

No affected versions have been published.

Timeline

Published
Aug 14, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-128527.5The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite CVE-2017-128538.8The RealTime RWR-3G-100 Router Firmware Version : Ver1.0.56 is affected by CSRF an attack that forces an end user to execute unwanted actionCVE-2017-128556.5Xen maintains the _GTF_{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. A guest is expected not to modify theCVE-2017-128566.1Cross-site scripting (XSS) vulnerability in C.P.Sub 5.2 allows remote attackers to inject arbitrary web script or HTML via the keyword paramCVE-2017-128578.8Polycom SoundStation IP, VVX, and RealPresence Trio that are running software older than UCS 4.0.12, 5.4.5 rev AG, 5.4.7, 5.5.2, or 5.6.0 arCVE-2017-128589.8Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecified impact via unknownCVE-2017-128595.9NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS environments, allows remote attackers to cause a denial of service via unspeCVE-2017-12866.5Sensitive information about the configuration of the IBM UrbanCode Deploy 6.1 through 6.9.6.0 server and database can be obtained by a user CVE-2017-128609.8The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using aCVE-2017-128619.8The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using aCVE-2017-128628.8In modules/imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is small than expected, which will cause copy buffer overflow lCVE-2017-128638.8In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function PxMDecoder::readData has an integer overflow when calculate src_pitch. If the image
CVE-2017-12851: High severity, CVSS 8.8 | Vulnix