| शीर्षक | Wekan <8.21 Information disclosure via insufficient authorization filtering |
|---|
| विवरण | Activity publication logic for linked boards did not sufficiently restrict returned activities to only boards visible to the requesting user. The fix filters linked board IDs by visibility checks and ensures the requesting user has access before returning activity data. |
|---|
| स्रोत | ⚠️ https://github.com/wekan/wekan/commit/91a936e07d2976d4246dfe834281c3aaa87f9503 |
|---|
| उपयोगकर्ता | MegaManSec (UID 94702) |
|---|
| सबमिशन | 04/02/2026 05:58 PM (3 महीनों पहले) |
|---|
| संयम | 08/02/2026 02:06 AM (3 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 344921 [WeKan तक 8.20 Activity Publication activities.js LinkedBoardActivitiesBleed सूचना का प्रकटीकरण] |
|---|
| अंक | 17 |
|---|