CVE-2017-12851

EUVD-2017-4387
An authenticated standard user could reset the password of the admin by altering form data. Affects kanboard before 1.0.46.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 63%
Affected Products (NVD)
VendorProductVersion
kanboardkanboard
𝑥
≤ 1.0.45
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
kanboard
bookworm
1.2.26+ds-2+deb12u2
fixed
bookworm (security)
1.2.26+ds-2+deb12u2
fixed
sid
1.2.31+ds2-1
fixed
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/100352
https://github.com/kanboard/kanboard/commit/b79b18efd7a1a8b591753a4eddd473f88d55b7df
http://www.securityfocus.com/bid/100352
https://github.com/kanboard/kanboard/commit/b79b18efd7a1a8b591753a4eddd473f88d55b7df