In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tasks of a private project of another user.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "1.0.0"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.1"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.2"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.3"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.4"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.5"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.6"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.7"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.8"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.9"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.10"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.11"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.12"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.13"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.14"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.15"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.16"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.17"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.18"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.19"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.20"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.21"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.22"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.23"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.24"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.25"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.26"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.27"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.28"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.29"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.30"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.31"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.32"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.33"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.34"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.35"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.36"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.37"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.38"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.39"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.40"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.41"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.42"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.43"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.44"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.45"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.46"
}
]
}[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.0.31-beta0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.0.31-beta1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.0.32-beta0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.0.32-beta1"
}
]
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15207.json"