Description
kan through 0.6.0 fails to properly validate board creation permissions in the GitHub project import endpoint, allowing guests to create boards despite lacking board:create permission. Attackers can bypass authorization checks by using the importProjects mutation to create boards while remaining blocked on direct creation paths.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| kanbn | kan | ≤ 0.6.0 | — |
References
- GitHub Issue #628 issue-tracking
- https://github.com/kanbn/kan product
- importProjects asserts workspace membership only technical-description
- the Trello import path asserts the board:create permission technical-description
- VulnCheck Advisory: kan through 0.6.0 Authorization Bypass via GitHub Project Import third-party-advisory