High severity8.1NVD Advisory· Published Jan 26, 2021· Updated Jun 17, 2026

CVE-2021-3309

Description

packages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections even though they are not authorized by the Certification Authority trust store,

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Wekan Project/Wekan
cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*
Range: <4.87
Wekan/Wekanllm-fuzzy2 versions
<4.87+ 1 more
- (no CPE)range: <4.87
- (no CPE)

Patches

Vulnerability mechanics

References

github.com/wekan/wekan/pull/3483/commits/31f89121fecca5a761b05cc3a26d4f237e90b484nvdPatchThird Party Advisory
github.com/wekan/wekan/issues/3482nvdExploitIssue TrackingThird Party Advisory
github.com/wekan/wekan/releases/tag/v4.87nvdRelease NotesThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000