CVE-2026-25531 in Kanboard
요약
\~에 의해 MITRE • 2026. 02. 13.
Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, The fix for CVE-2023-33968 is incomplete. The TaskCreationController::duplicateProjects() endpoint does not validate user permissions for target projects, allowing authenticated users to duplicate tasks into projects they cannot access. This vulnerability is fixed in 1.2.50.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.