Threats tagged 'ghsa-x33j-2f75-fm5m'

Vikunja versions prior to 2.7.1 have an improper authorization vulnerability in the canDoBucket function. This flaw allows users with project write access to delete buckets by exploiting a mismatched view ID. Attackers can bypass the last-bucket protection by requesting deletion through another view's bucket endpoint, resulting in dangling references to default or done buckets and inconsistent task bucket states.