repository icon
plankanban / planka Project repository

The realtime kanban board for workgroups built with React and Redux.

Submit a report

FIRST INTERACTION

WITHIN2 DAYS

REVIEW

WITHIN4 DAYS

FIX

WITHIN13 DAYS

No Limit in length of new project name，results in memory consumption/DOS attack...
qwertui0p
informative
Medium
planka v1.7.3 allows improper authorize issues in the change the username . The...
huy3npn
informative
High
planka v1.7.3 allows improper access control issues in the change photo. The imp...
huy3npn
informative
High
Tabnabbing on spec-disrespecting browsers
ndren
Medium
Viewer role can tamper everyone's comment
nerrorsec
informative
High
Viewer can become Editor without Administrator
nerrorsec
informative
High
Session does not expire on logout
nerrorsec
High
User Enumeration Via Login Error Message
akshayravic09yc47
duplicate
Low
No Ratelimit Protection On Login Field Leads To Possible Account Takeover
akshayravic09yc47
duplicate
Critical
Cookie without HttpOnly flag set
7h3h4ckv157
informative
Low
Email enumeration via Login page
khanhchauminh
informative
High
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
7h3h4ckv157
informative
High
Cross-Site Request Forgery
vultza
Medium
Denial of Service via Attachment Upload
vultza
High
•$10
Weak password policy on account creation/password update
vultza
High
•$10
No password brute-force protection on login page
vultza
Critical
•$20
Path Traversal
vultza
High
•$10•CVE-2022-2653