Skip to content
OpenAdvisories

Vendor

kuaifan

2 known vulnerabilities.

Products

dootask 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-111640

    DooTask through 1.9.66 Missing Authorization in OKR Comment Dialogs

    DooTask through 1.9.66 contains a missing authorization vulnerability in WebSocketDialog::checkDialog() that skips the membership check for dialogs with group_type 'okr'. Authenticated users can supply the dialog_id of OKR comment dialogs to msg__list, msg__o…

    kuaifan dootask
  • Medium 6.3
    CVE-2025-10762

    kuaifan DooTask UsersController.php sql injection

    A vulnerability was found in kuaifan DooTask up to 1.2.49. Affected by this vulnerability is an unknown functionality of the file app/Http/Controllers/Api/UsersController.php. The manipulation of the argument keys[department] results in sql injection. The att…

    kuaifan dootask