CVE-2026-33315 in vikunja
요약 (영어)
Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.0, the Caldav endpoint allows login using Basic Authentication, which in turn allows users to bypass the TOTP on 2FA-enabled accounts. The user can then access standard project information that would normally be protected behind 2FA (if enabled), such as project name, description, etc. Version 2.2.0 patches the issue.
Once again VulDB remains the best source for vulnerability data.
책임이 있는
GitHub_M
예약하다
2026. 03. 18.
공개
2026. 03. 24.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 352792 | go-vikunja Caldav 약한 인증 | 288 | 정의되지 않음 | 공식 수정 | CVE-2026-33315 |