Threats tagged 'ghsa-2fc5-hwxx-39f7'

Vikunja versions from 2.2.0 up to but not including 2.7.1 contain an authorization bypass vulnerability. This flaw allows attackers holding tokens scoped only to projects_webhooks to manage user-level webhooks of the owner by supplying a user_id in request bodies. Exploitation enables attackers to register user webhooks to their own receivers, thereby obtaining reminders and task payloads from all owner projects, as well as reading, modifying, or deleting existing user webhooks.