CVE-2025-65779

Description

An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Unauthenticated attackers can update a board's "sort" value (Boards.allow returns true without verifying userId), allowing arbitrary reordering of boards.

PUBLISHED Reserved 2025-11-18 | Published 2025-12-15 | Updated 2025-12-17 | Assigner mitre

References

github.com/wekan/wekan

wekan.fi/hall-of-fame/spacebleed/

github.com/wekan/wekan/blob/main/CHANGELOG.md

github.com/...ommit/ea310d7508b344512e5de0dfbc9bdfd38145c5c5

cve.org (CVE-2025-65779)

nvd.nist.gov (CVE-2025-65779)

Download JSON

Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.