5.3
Medium
CVE-2026-1964 A vulnerability was determined in WeKan up to 8.20
Description
A vulnerability was determined in WeKan up to 8.20. This impacts an unknown function of the file models/boards.js of the component REST Endpoint. This manipulation causes improper access controls. Remote exploitation of the attack is possible. Upgrading to version 8.21 will fix this issue. Patch name: 545566f5663545d16174e0f2399f231aa693ab6e. It is advisable to upgrade the affected component.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WeKan 8.21 | earliest → < 8.21 | 8.21 |
| WeKan | 8.20 | No fix stated |
| WeKan | 8.19 | No fix stated |
| WeKan | 8.18 | No fix stated |
| WeKan | 8.17 | No fix stated |
| WeKan | 8.16 | No fix stated |
| WeKan | 8.15 | No fix stated |
| WeKan | 8.14 | No fix stated |
| WeKan | 8.13 | No fix stated |
Show the 13 other branches Hide the 13 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| WeKan | 8.12 | No fix stated |
| WeKan | 8.11 | No fix stated |
| WeKan | 8.10 | No fix stated |
| WeKan | 8.9 | No fix stated |
| WeKan | 8.8 | No fix stated |
| WeKan | 8.7 | No fix stated |
| WeKan | 8.6 | No fix stated |
| WeKan | 8.5 | No fix stated |
| WeKan | 8.4 | No fix stated |
| WeKan | 8.3 | No fix stated |
| WeKan | 8.2 | No fix stated |
| WeKan | 8.1 | No fix stated |
| WeKan | 8.0 | No fix stated |
References
- VDB-344486 | WeKan REST Endpoint boards.js BoardTitleRESTBleed access control vuldb.com
- VDB-344486 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- Submit #742680 | Wekan <8.21 Improper access control in REST endpoint (CWE-284) vuldb.com
- github.com github.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of WeKan
The 14 CVEs of WeKan →
CVE-2026-2209
A vulnerability was detected in WeKan up to 8.18
5.3
Medium
CVE-2026-2208
A security vulnerability has been detected in WeKan up to 8.20
5.3
Medium
CVE-2026-2207
A weakness has been identified in WeKan up to 8.20
6.9
Medium
CVE-2026-2206
A security flaw has been discovered in WeKan up to 8.20
5.3
Medium