| Package | Affected versions | Patched versions |
|---|---|---|
| kanboard | < 1.2.50 | 1.2.50 |
Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, the getSwimlane API method lacks project-level authorization, allowing authenticated users to access swimlane data from projects they cannot access. This vulnerability is fixed in 1.2.50.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free