Askanimus Worktime Account security vulnerability

The Askanimus Worktime Account has a security vulnerability stemming from an insecure permission setting in the feiertage.ImportActivity component. Unauthorized attackers can exploit this flaw to create forged holiday/workday entries via specially crafted ICS imports...