Authorization Bypass in Wekan by WeKan

CVE-2021-3309

What is CVE-2021-3309?

An authorization bypass vulnerability exists in the Wekan application prior to version 4.87, specifically in the ldap.js file. This issue allows unauthorized connections to be processed without appropriate verification against the Certification Authority trust store, potentially exposing the application to various security risks. It is crucial for users to update to the latest version to mitigate these vulnerabilities and enhance application security.

References