CVE-2026-25562 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

WeKan versions prior to 8.19 contain an information disclosure vulnerability in the attachments publication. Attachment metadata can be returned without properl…
Medium CVSS: 5.3

CVE-2026-25562

WeKan versions prior to 8.19 contain an information disclosure vulnerability in the attachments publication. Attachment metadata can be returned without properly scoping results to boards and cards accessible to the requesting user, potentially exposing attachment metadata to unauthorized users.
Vendor
Wekan Project
Product
Wekan
CWE
CWE-203
Yayın Tarihi
2026-02-07 22:16:01
Güncelleme
2026-02-10 22:01:03
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-203 Wekan MEDIUM Wekan Project 2026

Referanslar

https://github.com/wekan/wekan/commit/6dfa3beb2b6ab23438d0f4395b84bf0749eb4820 https://wekan.fi/ https://www.vulncheck.com/advisories/wekan-attachments-publication-information-disclosure