Skip to content
Threat Feed
Subscribe

Product

Vikunja API (>= 1.0.0, <= 2.3.0)

1 brief RSS
high advisory

Vikunja Broken Access Control and Privilege Escalation via Link Share

A broken access control vulnerability in Vikunja allows read-only project members to retrieve sensitive link-share hashes and escalate their privileges to the permission level of those shares.

Vikunja API +2 privilege-escalation access-control web-application authentication-bypass oidc identity-takeover vulnerability
1r 3t 1c