An authenticated standard user could reset the password of the admin by altering form data. Affects kanboard prior to 1.0.46.
kanboard kanboard