CVE-2017-12851

An authenticated standard user could reset the password of the admin by altering form data. Affects kanboard before 1.0.46.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2017-08-14

Last modified

2024-08-05

Weaknesses

CWE-640

Affected products

• Kanboard (Kanboard)

References

• http://www.securityfocus.com/bid/100352
• https://github.com/kanboard/kanboard/commit/b79b18efd7a1a8b591753a4eddd473f88d55b7df