CVE-2026-25560

概要

参考情報

• wekan/wekan commit 0b0e16c · Patch
• wekan.fi · Product
• vulncheck.com/advisories/wekan-ldap-authentication-filter-injection · Third Party Advisory

wekan のその他の脆弱性

• CVE-2026-30847中 6.5Wekan is an open source kanban tool built with Meteor. In versions 8.31.0 through 8.33, the notificationUsers publication in Wekan publishes…
• CVE-2026-30846高 7.5Wekan is an open source kanban tool built with Meteor. In versions 8.31.0 through 8.33, the globalwebhooks publication exposes all global we…
• CVE-2026-30845高 8.2Wekan is an open source kanban tool built with Meteor. In versions 8.31.0 through 8.33, the board composite publication in Wekan publishes a…
• CVE-2026-30844高 8.1Wekan is an open source kanban tool built with Meteor. Versions 8.32 and 8.33 are vulnerable to Server-Side Request Forgery (SSRF) via attac…
• CVE-2026-30843中 6.5Wekan is an open source kanban tool built with Meteor. Versions 8.32 and 8.33 have a critical Insecure Direct Object Reference (IDOR) issue …