ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2024.0366
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2024-0366)
Resumen:	The remote host is missing an update for the 'kanboard' package(s) announced via the MGASA-2024-0366 advisory.
Descripción:	Summary: The remote host is missing an update for the 'kanboard' package(s) announced via the MGASA-2024-0366 advisory. Vulnerability Insight: In versions prior to 1.2.31 an authenticated user is able to perform a SQL injection, leading to a privilege escalation or loss of confidentiality. It appears that in some insert and update operations the code improperly uses the PicoDB library to update/insert new information. Affected Software/OS: 'kanboard' package(s) on Mageia 9. Solution: Please install the updated package(s). CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2023-36813 Debian Security Information: DSA-5454 (Google Search) https://www.debian.org/security/2023/dsa-5454 https://github.com/kanboard/kanboard/commit/25b93343baeaf8ad018dcd87b094e47a5c6a3e0a https://github.com/kanboard/kanboard/releases/tag/v1.2.31 https://github.com/kanboard/kanboard/security/advisories/GHSA-9gvq-78jp-jxcx
Copyright	Copyright (C) 2024 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.