6 matches found
CVE-2026-123500
Vikunja before 2.7.1 contains an insecure file permissions vulnerability that allows local users to read dump archives created with umask permissions by the vikunja dump command. Local attackers on a shared host can read the world-readable zip in the rootpath to obtain config, password hashes, TO...
CVE-2026-123500
Vikunja versions prior to 2.7.1 are affected by an insecure file permissions vulnerability (CWE-276). The vikunja dump command creates dump archives with world-readable permissions due to umask settings. This allows local attackers on a shared host to access the zip file in the rootpath and retri...
EUVD-2026-119385
Vikunja before 2.7.1 contains an insecure file permissions vulnerability that allows local users to read dump archives created with umask permissions by the vikunja dump command. Local attackers on a shared host can read the world-readable zip in the rootpath to obtain config, password hashes, TO...
CVE-2026-123500 Vikunja before 2.7.1 Insecure Permissions on Dump Archive via vikunja dump
Vikunja before 2.7.1 contains an insecure file permissions vulnerability that allows local users to read dump archives created with umask permissions by the vikunja dump command. Local attackers on a shared host can read the world-readable zip in the rootpath to obtain config, password hashes, TO...
PT-2026-139781
Vikunja before 2.7.1 contains an insecure file permissions vulnerability that allows local users to read dump archives created with umask permissions by the vikunja dump command. Local attackers on a shared host can read the world-readable zip in the rootpath to obtain config, password hashes, TO...
CVE-2026-123500: go-vikunja vikunja: Vikunja before 2.7.1 contains an insecure file permissions vulnerability that allows local users to read dump archives…
Vikunja before 2.7.1 contains an insecure file permissions vulnerability that allows local users to read dump archives created with umask permissions by the vikunja dump command. Local attackers on a shared host can read the world-readable zip in the rootpath to obtain config, password hashes, TO...