6 matches found
CVE-2026-112045
A vulnerability was detected in donetick up to 0.1.82. The impacted element is the function CanDeleteHistory of the file internal/chore/model/model.go of the component History Deletion Handler. The manipulation of the argument AssignedTo results in improper authorization. The attack can be launch...
CVE-2026-112045 donetick History Deletion model.go CanDeleteHistory improper authorization
A vulnerability was detected in donetick up to 0.1.82. The impacted element is the function CanDeleteHistory of the file internal/chore/model/model.go of the component History Deletion Handler. The manipulation of the argument AssignedTo results in improper authorization. The attack can be launch...
CVE-2026-112045 donetick History Deletion model.go CanDeleteHistory improper authorization
A vulnerability was detected in donetick up to 0.1.82. The impacted element is the function CanDeleteHistory of the file internal/chore/model/model.go of the component History Deletion Handler. The manipulation of the argument AssignedTo results in improper authorization. The attack can be launch...
CVE-2026-112045
A vulnerability exists in donetick versions up to 0.1.82 within the History Deletion Handler component. Specifically, the CanDeleteHistory function in the file internal/chore/model/model.go is susceptible to improper authorization (CWE-285, CWE-266) when the AssignedTo argument is manipulated. Th...
CVE-2026-112045
A vulnerability was detected in donetick up to 0.1.82. The impacted element is the function CanDeleteHistory of the file internal/chore/model/model.go of the component History Deletion Handler. The manipulation of the argument AssignedTo results in improper authorization. The attack can be launch...
EUVD-2026-104054
A vulnerability was detected in donetick up to 0.1.82. The impacted element is the function CanDeleteHistory of the file internal/chore/model/model.go of the component History Deletion Handler. The manipulation of the argument AssignedTo results in improper authorization. The attack can be launch...