CVE:CVE-2017-15211
CNNVD:CNNVD-201710-316
Kanboard是法国软件开发者Frederic Guillot所研发的一套开源的可视化任务板软件。该软件支持根据业务定制面板、任务拖动等。
Kanboard 1.0.47之前的版本中存在安全漏洞。攻击者可通过更改表单数据利用该漏洞向其它用户的私有项目中添加外部链接。
solution:Upgrade kanboard kanboard to a higher version than 1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.10,1.0.11,1.0.12,1.0.13,1.0.14,1.0.15,1.0.16,1.0.17,1.0.18,1.0.19,1.0.20,1.0.21,1.0.22,1.0.23,1.0.24,1.0.25,1.0.26,1.0.27,1.0.28,1.0.29,1.0.30,1.0.31,1.0.31:beta0,1.0.31:beta1,1.0.32,1.0.32:beta0,1.0.32:beta1,1.0.33,1.0.34,1.0.35,1.0.36,1.0.37,1.0.38,1.0.39,1.0.40,1.0.41,1.0.42,1.0.43,1.0.44,1.0.45,1.0.46,and avoid the version 1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.10,1.0.11,1.0.12,1.0.13,1.0.14,1.0.15,1.0.16,1.0.17,1.0.18,1.0.19,1.0.20,1.0.21,1.0.22,1.0.23,1.0.24,1.0.25,1.0.26,1.0.27,1.0.28,1.0.29,1.0.30,1.0.31,1.0.31:beta0,1.0.31:beta1,1.0.32,1.0.32:beta0,1.0.32:beta1,1.0.33,1.0.34,1.0.35,1.0.36,1.0.37,1.0.38,1.0.39,1.0.40,1.0.41,1.0.42,1.0.43,1.0.44,1.0.45,1.0.46