CyberRota Analysis
AI-GeneratedVikunja versions up to 2.4.0 are vulnerable to a principal-type confusion issue that allows attackers with a link-share JWT to manipulate user permissions. This flaw can lead to unauthorized actions such as removing users from teams, deleting bot accounts, and accessing sensitive team information due to ID collisions. Organizations using Vikunja should prioritize patching this vulnerability to mitigate the risk of data exposure and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Vikunja through 2.4.0 contains a principal-type confusion vulnerability where LinkSharing principals with id N are treated as user principals with users.id == N at three permission checks lacking type guards. Attackers with a link-share JWT can remove victims from teams, enumerate and delete victim bot users, or read team rosters by exploiting id collisions in the autoincrement space.