CVE-2023-36813
CVSS V2 None
CVSS V3 None
Description
Kanboard is project management software that focuses on the Kanban methodology. In versions prior to 1.2.31authenticated user is able to perform a SQL Injection, leading to a privilege escalation or loss of confidentiality. It appears that in some insert and update operations, the code improperly uses the PicoDB library to update/insert new information. Version 1.2.31 contains a fix for this issue.
Overview
- CVE ID
- CVE-2023-36813
- Assigner
- GitHub_M
- Vulnerability Status
- PUBLISHED
- Published Version
- 2023-07-05T21:05:53.347Z
- Last Modified Date
- 2023-07-05T21:05:53.347Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://github.com/kanboard/kanboard/security/advisories/GHSA-9gvq-78jp-jxcx | x_refsource_CONFIRM |
| https://github.com/kanboard/kanboard/commit/25b93343baeaf8ad018dcd87b094e47a5c6a3e0a | x_refsource_MISC |
| https://github.com/kanboard/kanboard/releases/tag/v1.2.31 | x_refsource_MISC |
| https://www.debian.org/security/2023/dsa-5454 |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-36813 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36813 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-06-25 16:55:17 | Added to TrackCVE |