1 matches found
Vikunja: Webhooks and link shares survive every revocation path, so a removed collaborator keeps a live feed
Summary A collaborator removed from a project keeps a live, automatic feed of that project's contents, because nothing on any revocation path deletes the webhook they created while they had access. Vikunja already has a revocation-cleanup routine that deletes other derived rows for exactly this...
5.5AI score
SaveExploits0References2Affected Software1
20