CVE-2025-65782: Medium severity wekan vulnerability
An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Authorization flaw in card update handling allows board members (and potentially other authenticated users) to add/remove arbitrary user IDs in vote.positive / vote.negative arrays, enabling vote forgery and unauthorized voting.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-65782?
The severity of CVE-2025-65782 is classified as a high-risk vulnerability due to its potential for unauthorized manipulation of user votes.
How do I fix CVE-2025-65782?
To fix CVE-2025-65782, upgrade Wekan to version 18.16 or later, where the vulnerability has been addressed.
What does CVE-2025-65782 affect?
CVE-2025-65782 affects Wekan versions up to 18.15, specifically related to authorization flaws in card update handling.
Who is impacted by CVE-2025-65782?
CVE-2025-65782 could impact board members and other authenticated users who can manipulate vote arrays in Wekan.
Is CVE-2025-65782 a code execution vulnerability?
No, CVE-2025-65782 is not a code execution vulnerability; it allows unauthorized vote manipulation instead.