CVE-2017-12850

An authenticated standard user could reset the password of other users (including the admin) by altering form data. Affects kanboard before 1.0.46.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2017-08-14

Last modified

2024-08-05

Weaknesses

CWE-640

Affected products

• Kanboard (Kanboard)

References

• http://www.securityfocus.com/bid/100352
• https://github.com/kanboard/kanboard/commit/88dd6abbf3f519897f2f6280e95c9eec9123a4ae