An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Authorization flaw in card update handling allows board members (and potentially other authenticated users) to add/remove arbitrary user IDs in vote.positive / vote.negative arrays, enabling vote forgery and unauthorized voting.
Metrics
Affected Vendors & Products
References
History
Tue, 16 Dec 2025 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Wekan Project
Wekan Project wekan |
|
| Vendors & Products |
Wekan Project
Wekan Project wekan |
Mon, 15 Dec 2025 14:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Authorization flaw in card update handling allows board members (and potentially other authenticated users) to add/remove arbitrary user IDs in vote.positive / vote.negative arrays, enabling vote forgery and unauthorized voting. | |
| References |
|
Status: PUBLISHED
Assigner: mitre
Published: 2025-12-15T00:00:00.000Z
Updated: 2025-12-15T14:12:09.506Z
Reserved: 2025-11-18T00:00:00.000Z
Link: CVE-2025-65782
No data.
Status : Awaiting Analysis
Published: 2025-12-15T14:15:57.680
Modified: 2025-12-15T18:22:13.783
Link: CVE-2025-65782
No data.
ReportizFlow