CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-36399

Kanboard is project management software that focuses on the Kanban methodology. The vuln is in app/Controller/ProjectPermissionController.php function addUser(). The users permission to add users to a project only get checked on the URL parameter project_id. If the user is authorized to add users to this project the request gets processed. The users permission for the POST BODY parameter project_id does not get checked again while processing. An attacker with the 'Project Manager' on a single project may take over any other project. The vulnerability is fixed in 1.2.37.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 31.5%

CVSS Severity

CVSS v3 Score 8.2

References

Products affected by CVE-2024-36399

Kanboard » Kanboard » Version: 1.0.0

cpe:2.3:a:kanboard:kanboard:1.0.0
Kanboard » Kanboard » Version: 1.0.1

cpe:2.3:a:kanboard:kanboard:1.0.1
Kanboard » Kanboard » Version: 1.0.10

cpe:2.3:a:kanboard:kanboard:1.0.10
Kanboard » Kanboard » Version: 1.0.11

cpe:2.3:a:kanboard:kanboard:1.0.11
Kanboard » Kanboard » Version: 1.0.12

cpe:2.3:a:kanboard:kanboard:1.0.12
Kanboard » Kanboard » Version: 1.0.13

cpe:2.3:a:kanboard:kanboard:1.0.13
Kanboard » Kanboard » Version: 1.0.14

cpe:2.3:a:kanboard:kanboard:1.0.14
Kanboard » Kanboard » Version: 1.0.15

cpe:2.3:a:kanboard:kanboard:1.0.15
Kanboard » Kanboard » Version: 1.0.16

cpe:2.3:a:kanboard:kanboard:1.0.16
Kanboard » Kanboard » Version: 1.0.17

cpe:2.3:a:kanboard:kanboard:1.0.17
Kanboard » Kanboard » Version: 1.0.18

cpe:2.3:a:kanboard:kanboard:1.0.18
Kanboard » Kanboard » Version: 1.0.19

cpe:2.3:a:kanboard:kanboard:1.0.19
Kanboard » Kanboard » Version: 1.0.2

cpe:2.3:a:kanboard:kanboard:1.0.2
Kanboard » Kanboard » Version: 1.0.20

cpe:2.3:a:kanboard:kanboard:1.0.20
Kanboard » Kanboard » Version: 1.0.21

cpe:2.3:a:kanboard:kanboard:1.0.21
Kanboard » Kanboard » Version: 1.0.22

cpe:2.3:a:kanboard:kanboard:1.0.22
Kanboard » Kanboard » Version: 1.0.23

cpe:2.3:a:kanboard:kanboard:1.0.23
Kanboard » Kanboard » Version: 1.0.24

cpe:2.3:a:kanboard:kanboard:1.0.24
Kanboard » Kanboard » Version: 1.0.25

cpe:2.3:a:kanboard:kanboard:1.0.25
Kanboard » Kanboard » Version: 1.0.26

cpe:2.3:a:kanboard:kanboard:1.0.26
Kanboard » Kanboard » Version: 1.0.27

cpe:2.3:a:kanboard:kanboard:1.0.27
Kanboard » Kanboard » Version: 1.0.28

cpe:2.3:a:kanboard:kanboard:1.0.28
Kanboard » Kanboard » Version: 1.0.29

cpe:2.3:a:kanboard:kanboard:1.0.29
Kanboard » Kanboard » Version: 1.0.3

cpe:2.3:a:kanboard:kanboard:1.0.3
Kanboard » Kanboard » Version: 1.0.30

cpe:2.3:a:kanboard:kanboard:1.0.30
Kanboard » Kanboard » Version: 1.0.31

cpe:2.3:a:kanboard:kanboard:1.0.31
Kanboard » Kanboard » Version: 1.0.32

cpe:2.3:a:kanboard:kanboard:1.0.32
Kanboard » Kanboard » Version: 1.0.33

cpe:2.3:a:kanboard:kanboard:1.0.33
Kanboard » Kanboard » Version: 1.0.34

cpe:2.3:a:kanboard:kanboard:1.0.34
Kanboard » Kanboard » Version: 1.0.35

cpe:2.3:a:kanboard:kanboard:1.0.35
Kanboard » Kanboard » Version: 1.0.36

cpe:2.3:a:kanboard:kanboard:1.0.36
Kanboard » Kanboard » Version: 1.0.37

cpe:2.3:a:kanboard:kanboard:1.0.37
Kanboard » Kanboard » Version: 1.0.38

cpe:2.3:a:kanboard:kanboard:1.0.38
Kanboard » Kanboard » Version: 1.0.39

cpe:2.3:a:kanboard:kanboard:1.0.39
Kanboard » Kanboard » Version: 1.0.4

cpe:2.3:a:kanboard:kanboard:1.0.4
Kanboard » Kanboard » Version: 1.0.40

cpe:2.3:a:kanboard:kanboard:1.0.40
Kanboard » Kanboard » Version: 1.0.41

cpe:2.3:a:kanboard:kanboard:1.0.41
Kanboard » Kanboard » Version: 1.0.42

cpe:2.3:a:kanboard:kanboard:1.0.42
Kanboard » Kanboard » Version: 1.0.43

cpe:2.3:a:kanboard:kanboard:1.0.43
Kanboard » Kanboard » Version: 1.0.44

cpe:2.3:a:kanboard:kanboard:1.0.44
Kanboard » Kanboard » Version: 1.0.45

cpe:2.3:a:kanboard:kanboard:1.0.45
Kanboard » Kanboard » Version: 1.0.46

cpe:2.3:a:kanboard:kanboard:1.0.46
Kanboard » Kanboard » Version: 1.0.47

cpe:2.3:a:kanboard:kanboard:1.0.47
Kanboard » Kanboard » Version: 1.0.48

cpe:2.3:a:kanboard:kanboard:1.0.48
Kanboard » Kanboard » Version: 1.0.5

cpe:2.3:a:kanboard:kanboard:1.0.5
Kanboard » Kanboard » Version: 1.0.6

cpe:2.3:a:kanboard:kanboard:1.0.6
Kanboard » Kanboard » Version: 1.0.7

cpe:2.3:a:kanboard:kanboard:1.0.7
Kanboard » Kanboard » Version: 1.0.8

cpe:2.3:a:kanboard:kanboard:1.0.8
Kanboard » Kanboard » Version: 1.0.9

cpe:2.3:a:kanboard:kanboard:1.0.9
Kanboard » Kanboard » Version: 1.1.0

cpe:2.3:a:kanboard:kanboard:1.1.0
Kanboard » Kanboard » Version: 1.1.1

cpe:2.3:a:kanboard:kanboard:1.1.1
Kanboard » Kanboard » Version: 1.2.0

cpe:2.3:a:kanboard:kanboard:1.2.0
Kanboard » Kanboard » Version: 1.2.1

cpe:2.3:a:kanboard:kanboard:1.2.1
Kanboard » Kanboard » Version: 1.2.10

cpe:2.3:a:kanboard:kanboard:1.2.10
Kanboard » Kanboard » Version: 1.2.11

cpe:2.3:a:kanboard:kanboard:1.2.11
Kanboard » Kanboard » Version: 1.2.12

cpe:2.3:a:kanboard:kanboard:1.2.12
Kanboard » Kanboard » Version: 1.2.13

cpe:2.3:a:kanboard:kanboard:1.2.13
Kanboard » Kanboard » Version: 1.2.14

cpe:2.3:a:kanboard:kanboard:1.2.14
Kanboard » Kanboard » Version: 1.2.15

cpe:2.3:a:kanboard:kanboard:1.2.15
Kanboard » Kanboard » Version: 1.2.16

cpe:2.3:a:kanboard:kanboard:1.2.16
Kanboard » Kanboard » Version: 1.2.17

cpe:2.3:a:kanboard:kanboard:1.2.17
Kanboard » Kanboard » Version: 1.2.18

cpe:2.3:a:kanboard:kanboard:1.2.18
Kanboard » Kanboard » Version: 1.2.19

cpe:2.3:a:kanboard:kanboard:1.2.19
Kanboard » Kanboard » Version: 1.2.2

cpe:2.3:a:kanboard:kanboard:1.2.2
Kanboard » Kanboard » Version: 1.2.20

cpe:2.3:a:kanboard:kanboard:1.2.20
Kanboard » Kanboard » Version: 1.2.21

cpe:2.3:a:kanboard:kanboard:1.2.21
Kanboard » Kanboard » Version: 1.2.22

cpe:2.3:a:kanboard:kanboard:1.2.22
Kanboard » Kanboard » Version: 1.2.23

cpe:2.3:a:kanboard:kanboard:1.2.23
Kanboard » Kanboard » Version: 1.2.24

cpe:2.3:a:kanboard:kanboard:1.2.24
Kanboard » Kanboard » Version: 1.2.25

cpe:2.3:a:kanboard:kanboard:1.2.25
Kanboard » Kanboard » Version: 1.2.26

cpe:2.3:a:kanboard:kanboard:1.2.26
Kanboard » Kanboard » Version: 1.2.27

cpe:2.3:a:kanboard:kanboard:1.2.27
Kanboard » Kanboard » Version: 1.2.28

cpe:2.3:a:kanboard:kanboard:1.2.28
Kanboard » Kanboard » Version: 1.2.29

cpe:2.3:a:kanboard:kanboard:1.2.29
Kanboard » Kanboard » Version: 1.2.3

cpe:2.3:a:kanboard:kanboard:1.2.3
Kanboard » Kanboard » Version: 1.2.30

cpe:2.3:a:kanboard:kanboard:1.2.30
Kanboard » Kanboard » Version: 1.2.31

cpe:2.3:a:kanboard:kanboard:1.2.31
Kanboard » Kanboard » Version: 1.2.32

cpe:2.3:a:kanboard:kanboard:1.2.32
Kanboard » Kanboard » Version: 1.2.33

cpe:2.3:a:kanboard:kanboard:1.2.33
Kanboard » Kanboard » Version: 1.2.34

cpe:2.3:a:kanboard:kanboard:1.2.34
Kanboard » Kanboard » Version: 1.2.35

cpe:2.3:a:kanboard:kanboard:1.2.35
Kanboard » Kanboard » Version: 1.2.36

cpe:2.3:a:kanboard:kanboard:1.2.36
Kanboard » Kanboard » Version: 1.2.4

cpe:2.3:a:kanboard:kanboard:1.2.4
Kanboard » Kanboard » Version: 1.2.5

cpe:2.3:a:kanboard:kanboard:1.2.5
Kanboard » Kanboard » Version: 1.2.6

cpe:2.3:a:kanboard:kanboard:1.2.6
Kanboard » Kanboard » Version: 1.2.7

cpe:2.3:a:kanboard:kanboard:1.2.7
Kanboard » Kanboard » Version: 1.2.8

cpe:2.3:a:kanboard:kanboard:1.2.8
Kanboard » Kanboard » Version: 1.2.9

cpe:2.3:a:kanboard:kanboard:1.2.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-36399

Products

Pricing

Contact Us