WeKan Authorization Vulnerability in Card Move Logic Allowing Unauthorized Cross-Board Moves

A vulnerability exists in WeKan versions prior to 8.19, allowing users to move cards between boards, lists, or swimlanes without proper authorization. The issue arises because the destination board and its components are not adequately validated, potentially leading to unauthorized moves across boards.

Impact

Exploitation of this vulnerability allows for unauthorized movement of cards between different boards, lists, or swimlanes, which could disrupt task management and project organization.

Remediation

Users can upgrade to WeKan version 8.19 or later to address this vulnerability.