SZB-6c4519a40b
Wekan versions before 11.11 pass user search input to RegExp without escaping
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- WeKan
- Product
- Wekan
- First seen
Summary
The EUVD database entry says the user-search publication and searchUsers method in Wekan before 11.11 pass authenticated user-controlled search values to new RegExp(). The entry gives a CVSS v3.1 score of 6.5/10.
If you use WeKan
Upgrade Wekan to version 11.11 or later
Limit who can create accounts or log in on shared Wekan instances until updated
What the sources say 1
· Mastodon: “Prior to 11.11, the user-search publication in server/publications/users.js and the searchUsers method in server/models/users.js pass authenticated user-controlled searchTerm and query values to new RegExp() witho...” Source