CVE-2026-33058

MEDIUM

6.5

Descripcion

Kanboard is project management software focused on Kanban methodology. Versions prior to 1.2.51 have an authenticated SQL injection vulnerability. Attackers with the permission to add users to a project can leverage this vulnerability to dump the entirety of the kanboard database. Version 1.2.51 fixes the issue.

Detalles CVE

Puntuacion CVSS v3.16.5

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosLOW

Interaccion usuarioNONE

Publicado3/18/2026

Ultima modificacion3/18/2026

Fuentenvd

Avistamientos honeypot0

Productos afectados

kanboard:kanboard

Debilidades (CWE)

CWE-89

Referencias

https://github.com/kanboard/kanboard/security/advisories/GHSA-f62r-m4mr-2xhh(security-advisories@github.com)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.