CVE-2023-28485

概要

参考情報

• packetstormsecurity.com/files/172649/Wekan-6.74-Cross-Site-Scripting.html · Exploit
• wekan.github.io · Product
• wekan.github.io/hall-of-fame/filebleed · Exploit

wekan のその他の脆弱性

• CVE-2026-30847中 6.5Wekan is an open source kanban tool built with Meteor. In versions 8.31.0 through 8.33, the notificationUsers publication in Wekan publishes…
• CVE-2026-30846高 7.5Wekan is an open source kanban tool built with Meteor. In versions 8.31.0 through 8.33, the globalwebhooks publication exposes all global we…
• CVE-2026-30845高 8.2Wekan is an open source kanban tool built with Meteor. In versions 8.31.0 through 8.33, the board composite publication in Wekan publishes a…
• CVE-2026-30844高 8.1Wekan is an open source kanban tool built with Meteor. Versions 8.32 and 8.33 are vulnerable to Server-Side Request Forgery (SSRF) via attac…
• CVE-2026-30843中 6.5Wekan is an open source kanban tool built with Meteor. Versions 8.32 and 8.33 have a critical Insecure Direct Object Reference (IDOR) issue …