CVE-2017-15198

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

In Kanboard before 1.0.47, by altering form data, an authenticated user can edit a category of a private project of another user.

Metrics

CVSS 3.0 4.3/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Oct 11, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-151994.3In Kanboard before 1.0.47, by altering form data, an authenticated user can edit metadata of a private project of another user, as demonstraCVE-2017-15203.7IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when authentication typeCVE-2017-152004.3In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new task to a private project of another user.CVE-2017-152014.3In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tags of a private project of another user.CVE-2017-152024.3In Kanboard before 1.0.47, by altering form data, an authenticated user can edit columns of a private project of another user.CVE-2017-152034.3In Kanboard before 1.0.47, by altering form data, an authenticated user can remove categories from a private project of another user.CVE-2017-152044.3In Kanboard before 1.0.47, by altering form data, an authenticated user can add automatic actions to a private project of another user.CVE-2017-152054.3In Kanboard before 1.0.47, by altering form data, an authenticated user can download attachments from a private project of another user.CVE-2017-152064.3In Kanboard before 1.0.47, by altering form data, an authenticated user can add an internal link to a private project of another user.CVE-2017-152074.3In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tasks of a private project of another user.CVE-2017-152084.3In Kanboard before 1.0.47, by altering form data, an authenticated user can remove automatic actions from a private project of another user.CVE-2017-152094.3In Kanboard before 1.0.47, by altering form data, an authenticated user can remove attachments from a private project of another user.