Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7c8j-xhpq-ww8c

Опубликовано: 08 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.1

Описание

WeKan versions prior to 8.19 contain an authorization vulnerability where certain card update API paths validate only board read access rather than requiring write permission. This can allow users with read-only roles to perform card updates that should require write access.

WeKan versions prior to 8.19 contain an authorization vulnerability where certain card update API paths validate only board read access rather than requiring write permission. This can allow users with read-only roles to perform card updates that should require write access.

EPSS

Процентиль: 11%
0.00036
Низкий

7.1 High

CVSS4

Дефекты

CWE-863

Связанные уязвимости

nvd
2 дня назад

WeKan versions prior to 8.19 contain an authorization vulnerability where certain card update API paths validate only board read access rather than requiring write permission. This can allow users with read-only roles to perform card updates that should require write access.

debian
2 дня назад

WeKan versions prior to 8.19 contain an authorization vulnerability wh ...

EPSS

Процентиль: 11%
0.00036
Низкий

7.1 High

CVSS4

Дефекты

CWE-863