Description
Vikunja before 2.7.1 contains an insecure file permissions vulnerability that allows local users to read dump archives created with umask permissions by the vikunja dump command. Local attackers on a shared host can read the world-readable zip in the rootpath to obtain config, password hashes, TOTP secrets, tokens, and stored files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| go-vikunja | vikunja | < 2.7.1 | 2.7.1 |
References
- GitHub Security Advisory (GHSA-rp64-xg8g-9mpr) vendor-advisory
- VulnCheck Advisory: Vikunja before 2.7.1 Insecure Permissions on Dump Archive via vikunja dump third-party-advisory