CVSS 3.0
4.3 mediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NCVE-2017-15209
Medium (4.3) in kanboard kanboard. EPSS 0.9% chance of exploitation in the next 30 days.
In Kanboard before 1.0.47, by altering form data, an authenticated user can remove attachments from a private project of another user.
Severity
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
- CWE
- CWE-639
- Published
- Modified
- Record from
- the NVD, synced
Affected
- kanboard:kanboard
References
- http://openwall.com/lists/oss-security/2017/10/04/9
- https://github.com/kanboard/kanboard/commit/7100f6de8a1f566e260b3e65312767e4cde112b1
- https://kanboard.net/news/version-1.0.47
- http://openwall.com/lists/oss-security/2017/10/04/9
- https://github.com/kanboard/kanboard/commit/7100f6de8a1f566e260b3e65312767e4cde112b1