Security Advisory

CVE-2024-54001

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-12-05 15:17:47

Last updated 2024-12-05 16:41:45

Assigner GitHub_M

CVSS score 5.5

State PUBLISHED

Description

Kanboard is project management software that focuses on the Kanban methodology. HTML can be injected and stored into the application settings section. The fields application_language, application_date_format,application_timezone and application_time_format allow arbirary user input which is reflected. The vulnerability can become xss if the user input is javascript code that bypass CSP. This vulnerability is fixed in 1.2.41.

← Browse all CVEs View on cve.org ↗