Vulnerabilidades em Kanboard
28 resultadosAnálise Vexday
Kanboard apresenta exposição mínima com apenas 1 CVE catalogado e nenhuma exploração ativa documentada. A vulnerabilidade, de natureza recente (últimos 90 dias) e relacionada a SSRF (CWE-918), não atinge criticidade máxima, indicando risco controlado no curto prazo, mas que demanda monitoramento de possíveis desenvolvimentos em exploração.
CVE-2025-55011MEDIUMKanboard Path Traversal in File Write via Task File Upload ApiEPSS 0.4%CVE-2026-25530MEDIUMKanboard is missing authorization check in getSwimlane API allows cross-project data accessEPSS 0.4%CVE-2024-36399HIGHKanboard affected by Project Takeover via IDOR in ProjectPermissionControllerEPSS 0.4%CVE-2026-25531MEDIUMKanboard TaskCreationController::duplicateProjects() endpoint does not validate user permissions for target projectsEPSS 0.3%CVE-2025-46825LOWKanboard has stored Cross-site Scripting vulnerability in project nameEPSS 0.3%CVE-2025-52576MEDIUMKanboard vulnerable to Username Enumeration via Login Behavior and Bruteforce Protection BypassEPSS 0.3%CVE-2026-21879MEDIUMKanboard vulnerable to Open Redirect via protocol-relative URLsEPSS 0.3%CVE-2026-24885MEDIUMKanboard Affected by Cross-Site Request Forgery (CSRF) via Content-Type Misconfiguration in Project Role AssignmentEPSS 0.2%