3 matches found
CVE-2026-41455
WeKan before 8.35 contains a server-side request forgery vulnerability in webhook integration URL handling where the URL scheme field accepts any string without protocol restriction or destination validation. Attackers who can create or modify integrations can set webhook URLs to internal network...
8.5CVSS6AI score0.00236EPSS
SaveExploits0References4
CVE-2026-41455
CVE-2026-41455 affects WeKan
8.5CVSS6AI score0.00236EPSS
SaveExploits0References3
CVE-2026-41455 WeKan < 8.35 SSRF via Webhook URL
WeKan before 8.35 contains a server-side request forgery vulnerability in webhook integration URL handling where the URL scheme field accepts any string without protocol restriction or destination validation. Attackers who can create or modify integrations can set webhook URLs to internal network...
6.3CVSS6.1AI score0.00236EPSS
SaveExploits0References6
20