CVE-2026-33313 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.0, an authenticated user can read any task comment by ID, regardless of whe…
Medium CVSS: 5.3

CVE-2026-33313

Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.0, an authenticated user can read any task comment by ID, regardless of whether they have access to the task the comment belongs to, by substituting the task ID in the API URL with a task they do have access to. Version 2.2.0 fixes the issue.
Vendor
Vikunja
Product
Vikunja
CWE
CWE-639
Yayın Tarihi
2026-03-24 15:16:35
Güncelleme
2026-03-24 19:21:12
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-639 Vikunja MEDIUM Vikunja 2026

Referanslar

https://github.com/go-vikunja/vikunja/commit/bc6d843ed4df82a6c89f10aa676a7a33d27bf2fd https://github.com/go-vikunja/vikunja/security/advisories/GHSA-mr3j-p26x-72x4 https://vikunja.io/changelog/vikunja-v2.2.0-was-released