Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-1964

WeKan REST Endpoint boards.js BoardTitleRESTBleed access control

Description

A vulnerability was determined in WeKan up to 8.20. This impacts an unknown function of the file models/boards.js of the component REST Endpoint. This manipulation causes improper access controls. Remote exploitation of the attack is possible. Upgrading to version 8.21 will fix this issue. Patch name: 545566f5663545d16174e0f2399f231aa693ab6e. It is advisable to upgrade the affected component.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a WeKan

  • 8.0affected
  • 8.1affected
  • 8.2affected
  • 8.3affected
  • 8.4affected
  • 8.5affected
  • 8.6affected
  • 8.7affected
  • 8.8affected
  • 8.9affected
  • 8.10affected
  • 8.11affected
  • 8.12affected
  • 8.13affected
  • 8.14affected
  • 8.15affected
  • 8.16affected
  • 8.17affected
  • 8.18affected
  • 8.19affected
  • 8.20affected
  • 8.21unaffected

References