CVE-2024-36399

Kanboard is project management software that focuses on the Kanban methodology. The vuln is in app/Controller/ProjectPermissionController.php function addUser(). The users permission to add users to a project only get checked on the URL parameter project_id. If the user is authorized to add users to this project the request gets processed. The users permission for the POST BODY parameter project_id does not get checked again while processing. An attacker with the 'Project Manager' on a single project may take over any other project. The vulnerability is fixed in 1.2.37.

• CWE-284
• CWE-285
• CWE-639
• CWE-639

• https://github.com/kanboard/kanboard/commit/b6703688aac8187f5ea4d4d704fc7afeeffeafa7Patch
• https://github.com/kanboard/kanboard/security/advisories/GHSA-x8v7-3ghx-65cvExploit, Vendor Advisory
• https://github.com/kanboard/kanboard/commit/b6703688aac8187f5ea4d4d704fc7afeeffeafa7Patch
• https://github.com/kanboard/kanboard/security/advisories/GHSA-x8v7-3ghx-65cvExploit, Vendor Advisory

Published

Jun 6, 2024

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-36393SysAid - CWE-89: Improper Neutralization of Special Elements…9.8
• CVE-2024-36394SysAid - CWE-78: Improper Neutralization of Special Elements…9.8
• CVE-2024-36395Verint - CWE-80: Improper Neutralization of Script-Related H…6.1
• CVE-2024-36396Verint - CWE-434: Unrestricted Upload of File with Dangerous…8.8
• CVE-2024-36397Vantiva - MediaAccess DGA2232 v19.4 - CWE-79: Improper Neutr…6.1
• CVE-2024-36398A vulnerability has been identified in SINEC NMS (All versio…7.8
• CVE-2024-3640An unquoted executable path exists in the Rockwell Automatio…7
• CVE-2024-36400nano-id is a unique string ID generator for Rust. Affected v…9.8
• CVE-2024-36401GeoServer is an open source server that allows users to shar…9.8
• CVE-2024-36402Matrix Media Repo (MMR) is a highly configurable multi-homes…5.3
• CVE-2024-36403Matrix Media Repo (MMR) is a highly configurable multi-homes…7.5
• CVE-2024-36404GeoTools is an open source Java library that provides tools …9.8