1 matches found
Vikunja: Cross-project task disclosure through subtask expansion
Summary Vikunja lets a task in one project have a subtask that lives in a different project. When listing a project's tasks, an option pulls in those subtasks ?expand%5B%5D=subtasks. The main listing is correctly filtered to the projects the caller can access, but the subtask expansion is not: it...
5.7AI score
SaveExploits0References5Affected Software1
20