In Acquisition Module, When new Budget is created, the END DATE must be greater than the START DATE. However, application is accepting END DATE which is smaller than START DATE. As a result, at the server backend, the validation is not happening making a way for manipulating the budget and suspicious act that leads to security violation. Therefore, request you to help us in fixing the issue by setting / writing code guidelines, which allows the user to select / enter START DATE that is SMALLER END DATE.
Can you explain a bit more why you see this as a security bug rather than a regular bug?
Changing this to a normal bug since there's no indication how it's a security bug