7 matches found
EUVD-2026-14925
Vikjuna: Link Share Hash Disclosure via ReadAll Endpoint Enables Permission Escalation...
Improper Authorization
Overview Affected versions of this package are vulnerable to Improper Authorization in the ReadAllWeb process. An attacker can gain unauthorized access to secret hashes for all link shares within a project by authenticating with a read-only link share and invoking the endpoint that lists all...
CVE-2026-33680
Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.2, the LinkSharing.ReadAll method allows link share authenticated users to list all link shares for a project, including their secret hashes. While LinkSharing.CanRead correctly blocks link share users from readi...
CVE-2026-33680 Vikunja Vulnerable to Link Share Hash Disclosure via ReadAll Endpoint Enables Permission Escalation
Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.2, the LinkSharing.ReadAll method allows link share authenticated users to list all link shares for a project, including their secret hashes. While LinkSharing.CanRead correctly blocks link share users from readi...
CVE-2026-33680
Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.2, the "LinkSharing.ReadAll" method allows link share authenticated users to list all link shares for a project, including their secret hashes. While "LinkSharing.CanRead" correctly blocks link share users from...
CVE-2026-33680
Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.2, the LinkSharing.ReadAll method allows link share authenticated users to list all link shares for a project, including their secret hashes. While LinkSharing.CanRead correctly blocks link share users from readi...
CVE-2026-33680: Improper Authorization
Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.2, the LinkSharing.ReadAll method allows link share authenticated users to list all link shares for a project, including their secret hashes. While LinkSharing.CanRead correctly blocks link share users from readi...