PT-2025-32687 · Kanboard · Kanboard

Bryanqb07 · Published 2025-08-12 · Updated 2025-08-22 · CVE-2025-55011

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Kanboard versions prior to 1.2.47

Description: Kanboard is project management software based on the Kanban methodology. Prior to version 1.2.47, the createTaskFile method in the API did not validate the task id parameter to ensure it was a valid task ID, nor did it check for path traversal. This allowed a malicious actor to write a file to any location on the system controlled by the application user. The impact is limited because the filename is hashed and has no extension.

Recommendations: Upgrade to version 1.2.47 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-55011

GHSA-26F4-RX96-XC55

Affected Products

Kanboard

References · 10

• 🔥 https://github.com/kanboard/kanboard/security/advisories/GHSA-26f4-rx96-xc55 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/55xxx/CVE-2025-55011.json · Exploit
• https://github.com/kanboard/kanboard/commit/523a6135e944b6884c091a3fd7605af8ef133681 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-55011 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55011 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-55011 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-55011 · Vendor Advisory
• https://github.com/kanboard/kanboard/blob/b2e35ac520add67cff792aab960b3c002c48e3d0/app/Api/Procedure/TaskFileProcedure.php#L47-L57 · Note
• https://t.me/cveNotify/133206 · Telegram Post
• https://twitter.com/CVEnew/status/1955303407402557607 · Twitter Post