CVE-2025-52560 - CVE House
Back to Database
Status published High CVE-2025-52560

Kanboard Password Reset Poisoning via Host Header Injection

Vulnerability Description

Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.46, Kanboard allows password reset emails to be sent with URLs derived from the unvalidated Host header when the application_url configuration is unset (default behavior). This allows an attacker to craft a malicious password reset link that leaks the token to an attacker-controlled domain. If a victim (including an administrator) clicks the poisoned link, their account can be taken over. This affects all users who initiate a password reset while application_url is not set. This issue has been patched in version 1.2.46.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-52560

Credits & Attribution

No credits recorded in the NVD database.

References

More from kanboard

View All →
CVE-2025-55011
Kanboard Path Traversal in File Write via Task File Upload Api
Medium 6.4
CVE-2025-55010
Kanboard Authenticated Admin Remote Code Execution via Unsafe Deserialization of Events
Critical 9.1
CVE-2025-52576
Kanboard vulnerable to Username Enumeration via Login Behavior and Bruteforce Protection Bypass
Medium 5.3
CVE-2025-46825
Kanboard has stored Cross-site Scripting vulnerability in project name
Low 1.3
CVE-2024-55603
Insufficient session invalidation in Kanboard
Medium 6.5

Affected Vendor

Affected Software

kanboard
Vulnerable Versions:
< 1.2.46

Timeline

Official Publish: June 24th, 2025
Last Modified: June 24th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Weaknesses (CWE)

CWE-640

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.