An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Authorization flaw in card update handling allows board members (and potentially other authenticated users) to add/remove arbitrary user IDs in vote.positive / vote.negative arrays, enabling vote forgery and unauthorized voting.
History

Tue, 16 Dec 2025 17:15:00 +0000

Type Values Removed Values Added
First Time appeared Wekan Project
Wekan Project wekan
Vendors & Products Wekan Project
Wekan Project wekan

Mon, 15 Dec 2025 14:15:00 +0000

Type Values Removed Values Added
Description An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Authorization flaw in card update handling allows board members (and potentially other authenticated users) to add/remove arbitrary user IDs in vote.positive / vote.negative arrays, enabling vote forgery and unauthorized voting.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2025-12-15T00:00:00.000Z

Updated: 2025-12-15T14:12:09.506Z

Reserved: 2025-11-18T00:00:00.000Z

Link: CVE-2025-65782

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-12-15T14:15:57.680

Modified: 2025-12-15T18:22:13.783

Link: CVE-2025-65782

cve-icon Redhat

No data.