WeKan Improper Access Control Vulnerability in Attachment Storage WIP Limit Function

A vulnerability exists in WeKan versions prior to 8.21, specifically within the Attachment Storage Handler's WIP limit application function. This flaw allows for improper access control, enabling unauthorized operations on attachment storage workflows. The vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability could lead to unauthorized modifications or actions within the application's attachment storage management, potentially disrupting workflow processes that rely on these attachments.

Remediation

Users are advised to upgrade to WeKan version 8.21, which addresses this vulnerability. The upgrade is available on the WeKan GitHub Releases page.