Launchpad.net

CVE 2017-12850

An authenticated standard user could reset the password of other users (including the admin) by altering form data. Affects kanboard before 1.0.46.

See the CVE page on Mitre.org for more details.

References