Vulnerabilidades en Kanboard
28 resultadosAnálisis Vexday
Kanboard apresenta exposição mínima com apenas 1 CVE catalogado e nenhuma exploração ativa documentada. A vulnerabilidade, de natureza recente (últimos 90 dias) e relacionada a SSRF (CWE-918), não atinge criticidade máxima, indicando risco controlado no curto prazo, mas que demanda monitoramento de possíveis desenvolvimentos em exploração.
CVE-2025-52576MEDIUMKanboard vulnerable to Username Enumeration via Login Behavior and Bruteforce Protection BypassEPSS 0.3%CVE-2026-57862HIGHKanboard 1.2.52 and prior SSRF Filter Bypass via Hexadecimal IP NotationEPSS 0.3%CVE-2026-33058HIGHKanboard has Authenticated SQL Injection in Project Permissions HandlerEPSS 0.3%CVE-2026-56774MEDIUMKanboard - Cross-User Deletion of Persistent Login Sessions via Unvalidated Session IDEPSS 0.3%CVE-2026-21879MEDIUMKanboard vulnerable to Open Redirect via protocol-relative URLsEPSS 0.3%CVE-2026-25530MEDIUMKanboard is missing authorization check in getSwimlane API allows cross-project data accessEPSS 0.2%CVE-2026-25531MEDIUMKanboard TaskCreationController::duplicateProjects() endpoint does not validate user permissions for target projectsEPSS 0.2%CVE-2026-24885MEDIUMKanboard Affected by Cross-Site Request Forgery (CSRF) via Content-Type Misconfiguration in Project Role AssignmentEPSS 0.2%