Focalboard File Ownership Validation Vulnerability Allowing Unauthorized File Access

A vulnerability exists in Focalboard version 8.0 due to improper validation of file ownership when serving uploaded files. This flaw enables an authenticated attacker to access the content of a file by knowing the victim's file ID. It is important to note that Focalboard as a standalone product is no longer maintained, and no fix will be provided.

Impact

Exploitation of this vulnerability could lead to unauthorized access to files, allowing attackers to read sensitive information that should be protected.