CVE-2017-12851: Kanboard

High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days.

An authenticated standard user could reset the password of the admin by altering form data. Affects kanboard before 1.0.46.

Affected products

• Kanboard Kanboard: up to and including 1.0.45

Published 2017-08-14. Last modified 2026-06-17.