CVE-2017-15212

In Kanboard before 1.0.47, by altering form data, an authenticated user can at least see the names of tags of a private project of another user.

• CWE-200

• http://openwall.com/lists/oss-security/2017/10/04/9Mailing List, Third Party Advisory, VDB Entry
• https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0Patch, Third Party Advisory
• https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524Patch, Third Party Advisory
• https://kanboard.net/news/version-1.0.47Release Notes, Vendor Advisory
• http://openwall.com/lists/oss-security/2017/10/04/9Mailing List, Third Party Advisory, VDB Entry
• https://github.com/kanboard/kanboard/commit/074f6c104f3e49401ef0065540338fc2d4be79f0Patch, Third Party Advisory
• https://github.com/kanboard/kanboard/commit/3e0f14ae2b0b5a44bd038a472f17eac75f538524Patch, Third Party Advisory
• https://kanboard.net/news/version-1.0.47Release Notes, Vendor Advisory

Published

Oct 11, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15207In Kanboard before 1.0.47, by altering form data, an authent…
• CVE-2017-15208In Kanboard before 1.0.47, by altering form data, an authent…
• CVE-2017-15209In Kanboard before 1.0.47, by altering form data, an authent…
• CVE-2017-1521IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Plat…
• CVE-2017-15210In Kanboard before 1.0.47, by altering form data, an authent…
• CVE-2017-15211In Kanboard before 1.0.47, by altering form data, an authent…
• CVE-2017-15213Stored XSS vulnerability in Flyspray before 1.0-rc6 allows a…
• CVE-2017-15214Stored XSS vulnerability in Flyspray 1.0-rc4 before 1.0-rc6 …
• CVE-2017-15215Reflected XSS vulnerability in Shaarli v0.9.1 allows an unau…
• CVE-2017-15216MISP before 2.4.81 has a potential reflected XSS in a quickD…
• CVE-2017-15217ImageMagick 7.0.7-2 has a memory leak in ReadSGIImage in cod…
• CVE-2017-15218ImageMagick 7.0.7-2 has a memory leak in ReadOneJNGImage in …