CVE-2026-25530
Kanboard is missing authorization check in getSwimlane API allows cross-project data access
Résumé
Kanboard is missing authorization check in getSwimlane API allows cross-project data access
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, the getSwimlane API method lacks project-level authorization, allowing authenticated users to access swimlane data from projects they cannot access. This vulnerability is fixed in 1.2.50.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Ubuntu UBUNTU-CVE-2026-25530 kanboard-cli
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com