2 matches found
CVE-2026-1897 WeKan Position-History Tracking positionHistory.js PositionHistoryBleed authorization
A vulnerability was found in WeKan up to 8.20. Affected by this issue is some unknown functionality of the file server/methods/positionHistory.js of the component Position-History Tracking. The manipulation results in missing authorization. The attack may be performed from remote. Upgrading to...
5.3CVSS0.00338EPSS
SaveExploits0References6
CVE-2026-1897: Missing Authorization
A vulnerability was found in WeKan up to 8.20. Affected by this issue is some unknown functionality of the file server/methods/positionHistory.js of the component Position-History Tracking. The manipulation results in missing authorization. The attack may be performed from remote. Upgrading to...
5.3CVSS4.9AI score0.00338EPSS
SaveExploits0References1
20