THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)

Ok

PUBLISHED

CVE-2024-36399

Kanboard affected by Project Takeover via IDOR in ProjectPermissionController

Assigner:GitHub_M (a0819718-46f1-4df5-94e2-005712e83aaa)
Reserved:2024-05-27
Published:2024-06-06
Updated:2024-06-06

Description

Kanboard is project management software that focuses on the Kanban methodology. The vuln is in app/Controller/ProjectPermissionController.php function addUser(). The users permission to add users to a project only get checked on the URL parameter project_id. If the user is authorized to add users to this project the request gets processed. The users permission for the POST BODY parameter project_id does not get checked again while processing. An attacker with the 'Project Manager' on a single project may take over any other project. The vulnerability is fixed in 1.2.37.



HIGH: 8.2CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

Problem types

CWE-284: Improper Access Control

CWE-285: Improper Authorization

CWE-639: Authorization Bypass Through User-Controlled Key

Product status

1.2.37
affected

References

https://github.com/kanboard/kanboard/security/advisories/GHSA-x8v7-3ghx-65cv

https://github.com/kanboard/kanboard/commit/b6703688aac8187f5ea4d4d704fc7afeeffeafa7

cve.org CVE-2024-36399

nvd.nist.gov CVE-2024-36399

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-36399