Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7c8j-xhpq-ww8c

Опубликовано: 08 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.1
CVSS3: 6.5

Описание

WeKan versions prior to 8.19 contain an authorization vulnerability where certain card update API paths validate only board read access rather than requiring write permission. This can allow users with read-only roles to perform card updates that should require write access.

WeKan versions prior to 8.19 contain an authorization vulnerability where certain card update API paths validate only board read access rather than requiring write permission. This can allow users with read-only roles to perform card updates that should require write access.

EPSS

Процентиль: 1%
0.00011
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 6.5
nvd
около 2 месяцев назад

WeKan versions prior to 8.19 contain an authorization vulnerability where certain card update API paths validate only board read access rather than requiring write permission. This can allow users with read-only roles to perform card updates that should require write access.

CVSS3: 6.5
debian
около 2 месяцев назад

WeKan versions prior to 8.19 contain an authorization vulnerability wh ...

EPSS

Процентиль: 1%
0.00011
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-863