CNNVD-202602-763 Information

CNNVD ID

CNNVD-202602-763

CVE-2026-1895

  • CNNVD Published: 2026-02-04

Description (Chinese)

WeKan是WeKan开源的一个看板应用程序。 WeKan 8.20及之前版本存在访问控制错误漏洞,该漏洞源于对文件models/lists.js中函数的操作导致访问控制不当。

Description (English)

Wekan is a panel application from WeKan Open Source. Wekan 8.20 and previous versions have access control bugs, which stem from inappropriate access controls resulting from the operation of functions in documents models/lists.js.

Hazard Level

High

Vulnerability Type

访问控制错误

Affected Vendor

WeKan

Published

2026-02-04

Last Modified

2026-02-24

References

https://github.com/wekan/wekan/ https://github.com/wekan/wekan/commit/8c0b4f79d8582932528ec2fdf2a4487c86770fb9 https://github.com/wekan/wekan/releases/tag/v8.21 https://vuldb.com/?ctiid.344267 https://vuldb.com/?id.344267 https://vuldb.com/?submit.742666

Patch

https://github.com/wekan/wekan/releases

Share on: