Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2026/02/06 1:25 a.m.3 views

CVE-2026-1894

A vulnerability was detected in WeKan up to 8.20. This impacts an unknown function of the file models/checklistItems.js of the component REST API. Performing a manipulation of the argument item.cardId/item.checklistId/card.boardId results in improper authorization. Remote exploitation of the atta...

6.5CVSS6.1AI score0.00015EPSS
Exploits0References1
NVD
NVD
added 2026/02/04 11:15 p.m.3 views

CVE-2026-1894

A vulnerability was detected in WeKan up to 8.20. This impacts an unknown function of the file models/checklistItems.js of the component REST API. Performing a manipulation of the argument item.cardId/item.checklistId/card.boardId results in improper authorization. Remote exploitation of the atta...

6.5CVSS0.00015EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2026/02/04 10:32 p.m.1 views

CVE-2026-1894 WeKan REST API checklistItems.js Checklist REST Bleed improper authorization

A vulnerability was detected in WeKan up to 8.20. This impacts an unknown function of the file models/checklistItems.js of the component REST API. Performing a manipulation of the argument item.cardId/item.checklistId/card.boardId results in improper authorization. Remote exploitation of the atta...

6.5CVSS6.1AI score0.00015EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/02/04 10:32 p.m.3 views

CVE-2026-1894

A vulnerability was detected in WeKan up to 8.20. This impacts an unknown function of the file models/checklistItems.js of the component REST API. Performing a manipulation of the argument item.cardId/item.checklistId/card.boardId results in improper authorization. Remote exploitation of the atta...

6.5CVSS6.1AI score0.00015EPSS
Exploits0References7
Cvelist
Cvelist
added 2026/02/04 10:32 p.m.19 views

CVE-2026-1894 WeKan REST API checklistItems.js Checklist REST Bleed improper authorization

A vulnerability was detected in WeKan up to 8.20. This impacts an unknown function of the file models/checklistItems.js of the component REST API. Performing a manipulation of the argument item.cardId/item.checklistId/card.boardId results in improper authorization. Remote exploitation of the atta...

6.5CVSS0.00015EPSS
Exploits0References6
CVE
CVE
added 2026/02/04 10:32 p.m.8 views

CVE-2026-1894

WeKan up to 8.20 is affected in the REST API component, specifically the file models/checklistItems.js. Manipulating the arguments item.cardId, item.checklistId, or card.boardId can lead to improper authorization and remote exploitation. A fix is available in version 8.21; apply the official patc...

6.5CVSS5AI score0.00015EPSS
Exploits0References6Affected Software1
Rows per page
Query Builder