Unscored CVE-2014-3920 EUVD-2014-3857GHSA-w524-fgjq-fxjr

Cross-site request forgery (CSRF) vulnerability in Kanboard before 1.0.6 allows remote attackers to hijack the authentication of administra…

Published Jul 3, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site request forgery (CSRF) vulnerability in Kanboard before 1.0.6 allows remote attackers to hijack the authentication of administrators for requests that add an administrative user via a save action to the default URI.

References

20140702 Cross-Site Request Forgery (CSRF) in Kanboard mailing-list
http://kanboard.net/news
https://www.htbridge.com/advisory/HTB23217