Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Uploaded attachments can be served with attacker-controlled Content-Type (text/html), allowing execution of attacker-supplied HTML/JS in the application's origin and enabling session/token theft and CSRF actions.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WeKan 安全漏洞
Vulnerability Description
WeKan是WeKan开源的一个看板应用程序。 WeKan 18.15及之前版本存在安全漏洞，该漏洞源于上传的附件可以使用攻击者控制的Content-Type，可能导致执行攻击者提供的HTML或JS。
CVSS Information
N/A
Vulnerability Type
N/A