CVE-2026-25566

概要

参考情報

• wekan/wekan commit 198509e · Patch
• wekan.fi · Product
• vulncheck.com/advisories/wekan-cross-board-card-move-without-destination-authorization · Third Party Advisory

wekan のその他の脆弱性

• CVE-2026-30847中 6.5Wekan is an open source kanban tool built with Meteor. In versions 8.31.0 through 8.33, the notificationUsers publication in Wekan publishes…
• CVE-2026-30846高 7.5Wekan is an open source kanban tool built with Meteor. In versions 8.31.0 through 8.33, the globalwebhooks publication exposes all global we…
• CVE-2026-30845高 8.2Wekan is an open source kanban tool built with Meteor. In versions 8.31.0 through 8.33, the board composite publication in Wekan publishes a…
• CVE-2026-30844高 8.1Wekan is an open source kanban tool built with Meteor. Versions 8.32 and 8.33 are vulnerable to Server-Side Request Forgery (SSRF) via attac…
• CVE-2026-30843中 6.5Wekan is an open source kanban tool built with Meteor. Versions 8.32 and 8.33 have a critical Insecure Direct Object Reference (IDOR) issue …