5.3
Medium
CVE-2026-2209 A vulnerability was detected in WeKan up to 8.18
Description
A vulnerability was detected in WeKan up to 8.18. The affected element is the function setCreateTranslation of the file client/components/settings/translationBody.js of the component Custom Translation Handler. The manipulation results in improper authorization. The attack can be launched remotely. Upgrading to version 8.19 is sufficient to fix this issue. The patch is identified as f244a43771f6ebf40218b83b9f46dba6b940d7de. It is suggested to upgrade the affected component.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WeKan 8.19 | earliest → < 8.19 | 8.19 |
| WeKan | 8.18 | No fix stated |
| WeKan | 8.17 | No fix stated |
| WeKan | 8.16 | No fix stated |
| WeKan | 8.15 | No fix stated |
| WeKan | 8.14 | No fix stated |
| WeKan | 8.13 | No fix stated |
| WeKan | 8.12 | No fix stated |
| WeKan | 8.11 | No fix stated |
Show the 11 other branches Hide the 11 other branches
References
- VDB-344923 | WeKan Custom Translation translationBody.js setCreateTranslation improper authorization vuldb.com
- VDB-344923 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- Submit #752269 | Wekan <8.20 IDOR in setCreateTranslation. Non-admin could change Custom Tran vuldb.com
- github.com github.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of WeKan
The 14 CVEs of WeKan →
CVE-2026-2208
A security vulnerability has been detected in WeKan up to 8.20
5.3
Medium
CVE-2026-2207
A weakness has been identified in WeKan up to 8.20
6.9
Medium
CVE-2026-2206
A security flaw has been discovered in WeKan up to 8.20
5.3
Medium
CVE-2026-2205
A vulnerability was identified in WeKan up to 8.20
5.3
Medium