agentprime: kanboardEvery new CVE for kanboard.https://agentprime.io/CVE-2026-57862: Kanboard 1.2.52 and prior SSRF Filter Bypass via Hexadecimal IP Notationhttps://agentprime.io/advisories/CVE-2026-57862/https://agentprime.io/advisories/CVE-2026-57862/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 15:26:23 GMTCVECVE-2026-58660: Kanboard BoardAjaxController Missing Ownership Check via Drag-and-Drophttps://agentprime.io/advisories/CVE-2026-58660/https://agentprime.io/advisories/CVE-2026-58660/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 17:03:17 GMTCVECVE-2026-56774: Kanboard - Cross-User Deletion of Persistent Login Sessions via Unvalidated Session IDhttps://agentprime.io/advisories/CVE-2026-56774/https://agentprime.io/advisories/CVE-2026-56774/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 18:10:22 GMTCVECVE-2026-33058: Kanboard has Authenticated SQL Injection in Project Permissions Handlerhttps://agentprime.io/advisories/CVE-2026-33058/https://agentprime.io/advisories/CVE-2026-33058/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Mar 2026 02:17:03 GMTCVECVE-2026-29056: Kanboard's privilege escalation via mass assignment in user invite registration allows any invited user to become adminhttps://agentprime.io/advisories/CVE-2026-29056/https://agentprime.io/advisories/CVE-2026-29056/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Mar 2026 01:56:19 GMTCVECVE-2026-25531: Kanboard TaskCreationController::duplicateProjects() endpoint does not validate user permissions for target projectshttps://agentprime.io/advisories/CVE-2026-25531/https://agentprime.io/advisories/CVE-2026-25531/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Feb 2026 15:04:24 GMTCVECVE-2026-25924: Kanboard is Missing Access Control on Plugin Installation leading to Administrative RCEhttps://agentprime.io/advisories/CVE-2026-25924/https://agentprime.io/advisories/CVE-2026-25924/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Feb 2026 20:43:19 GMTCVECVE-2026-25530: Kanboard is missing authorization check in getSwimlane API allows cross-project data accesshttps://agentprime.io/advisories/CVE-2026-25530/https://agentprime.io/advisories/CVE-2026-25530/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Feb 2026 16:47:58 GMTCVECVE-2026-24885: Kanboard Affected by Cross-Site Request Forgery (CSRF) via Content-Type Misconfiguration in Project Role Assignmenthttps://agentprime.io/advisories/CVE-2026-24885/https://agentprime.io/advisories/CVE-2026-24885/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Feb 2026 16:40:01 GMTCVECVE-2026-21881: Kanboard is Vulnerable to Reverse Proxy Authentication Bypasshttps://agentprime.io/advisories/CVE-2026-21881/https://agentprime.io/advisories/CVE-2026-21881/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Jan 2026 01:08:01 GMTCVEcriticalCVE-2026-21880: Kanboard LDAP Injection Vulnerability can Lead to User Enumeration and Information Disclosurehttps://agentprime.io/advisories/CVE-2026-21880/https://agentprime.io/advisories/CVE-2026-21880/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Jan 2026 00:59:20 GMTCVECVE-2026-21879: Kanboard vulnerable to Open Redirect via protocol-relative URLshttps://agentprime.io/advisories/CVE-2026-21879/https://agentprime.io/advisories/CVE-2026-21879/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Jan 2026 00:51:50 GMTCVECVE-2025-55010: Kanboard Authenticated Admin Remote Code Execution via Unsafe Deserialization of Eventshttps://agentprime.io/advisories/CVE-2025-55010/https://agentprime.io/advisories/CVE-2025-55010/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Aug 2025 15:57:13 GMTCVEcriticalCVE-2025-55011: Kanboard Path Traversal in File Write via Task File Upload Apihttps://agentprime.io/advisories/CVE-2025-55011/https://agentprime.io/advisories/CVE-2025-55011/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Aug 2025 15:57:08 GMTCVECVE-2025-52576: Kanboard vulnerable to Username Enumeration via Login Behavior and Bruteforce Protection Bypasshttps://agentprime.io/advisories/CVE-2025-52576/https://agentprime.io/advisories/CVE-2025-52576/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Jun 2025 16:46:01 GMTCVECVE-2025-52560: Kanboard Password Reset Poisoning via Host Header Injectionhttps://agentprime.io/advisories/CVE-2025-52560/https://agentprime.io/advisories/CVE-2025-52560/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Jun 2025 02:56:26 GMTCVECVE-2025-46825: Kanboard has stored Cross-site Scripting vulnerability in project namehttps://agentprime.io/advisories/CVE-2025-46825/https://agentprime.io/advisories/CVE-2025-46825/CVSS 1.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 May 2025 22:53:42 GMTCVECVE-2024-55603: Insufficient session invalidation in Kanboardhttps://agentprime.io/advisories/CVE-2024-55603/https://agentprime.io/advisories/CVE-2024-55603/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Dec 2024 23:52:57 GMTCVECVE-2024-54001: Kanboard allows a persistent HTML injection site scripting in settings page date formathttps://agentprime.io/advisories/CVE-2024-54001/https://agentprime.io/advisories/CVE-2024-54001/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Dec 2024 15:17:47 GMTCVECVE-2024-51747: Arbitrary File Read and Delete in kanboardhttps://agentprime.io/advisories/CVE-2024-51747/https://agentprime.io/advisories/CVE-2024-51747/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 Nov 2024 19:22:27 GMTCVEcriticalCVE-2024-51748: Remote code execution through language setting in kanboardhttps://agentprime.io/advisories/CVE-2024-51748/https://agentprime.io/advisories/CVE-2024-51748/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 Nov 2024 19:20:29 GMTCVEcriticalCVE-2024-36399: Kanboard affected by Project Takeover via IDOR in ProjectPermissionControllerhttps://agentprime.io/advisories/CVE-2024-36399/https://agentprime.io/advisories/CVE-2024-36399/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 15:15:46 GMTCVECVE-2023-36813: Kanboard Authenticated SQL Injections vulnerabilityhttps://agentprime.io/advisories/CVE-2023-36813/https://agentprime.io/advisories/CVE-2023-36813/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Jul 2023 21:05:53 GMTCVECVE-2023-33969: Stored Cross site scripting in the Task External Link Functionality in Kanboardhttps://agentprime.io/advisories/CVE-2023-33969/https://agentprime.io/advisories/CVE-2023-33969/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Jun 2023 19:57:11 GMTCVECVE-2023-33970: Missing access control in internal task links feature in Kanboardhttps://agentprime.io/advisories/CVE-2023-33970/https://agentprime.io/advisories/CVE-2023-33970/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Jun 2023 19:54:38 GMTCVECVE-2023-33968: Missing Access Control allows User to move and duplicate tasks in Kanboardhttps://agentprime.io/advisories/CVE-2023-33968/https://agentprime.io/advisories/CVE-2023-33968/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Jun 2023 19:49:17 GMTCVECVE-2023-33956: Parameter based Indirect Object Referencing leading to private file exposure in Kanboardhttps://agentprime.io/advisories/CVE-2023-33956/https://agentprime.io/advisories/CVE-2023-33956/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Jun 2023 19:34:51 GMTCVECVE-2023-32685: Clipboard based cross-site scripting (blocked with default CSP) in Kanboardhttps://agentprime.io/advisories/CVE-2023-32685/https://agentprime.io/advisories/CVE-2023-32685/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 May 2023 04:11:50 GMTCVE