xet7 - maintainer of Wekan
Did not notice security issue originally when merging new feature from pull request. Did fix issue when finally noticed it at production at Wekan demo server.
- Due Cards and Broken Cards: As Admin user, at All Users view of Due Cards and Broken Cards,
fixed to not show cards from other users private boards. This affected only logged in Admin user,
not logged in other users.
- Affected Wekan v4.73-v4.74
- Fixed at Wekan v4.75 2021-01-11
- More details at GitHub issue
and fixed code