This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-123526 | BDVDB-2026-401883 Detail

go-vikunjavikunja

Description#

Vikunja before 2.7.1 contains a mass assignment vulnerability that allows any authenticated user to set the read-only external_id field through the team create and update endpoints. Attackers can tag a team they create or administer as externally managed, permanently blocking removal of every member and causing SSO members to be dropped from the team at their next login.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact low, availability impact low. Attack vector: network.

Weaknesses#

  • CWE-915 Improperly Controlled Modification of Dynamically-Determined Object Attributes

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.