Authorization Bypass in Wekan by WeKan

CVE-2021-3309

What is CVE-2021-3309?

An authorization bypass vulnerability exists in the Wekan application prior to version 4.87, specifically in the ldap.js file. This issue allows unauthorized connections to be processed without appropriate verification against the Certification Authority trust store, potentially exposing the application to various security risks. It is crucial for users to update to the latest version to mitigate these vulnerabilities and enhance application security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References