Vulnerabilities

TI-2021-02922 CVE-2021-4033 · GHSA-4jwx-78vx-gm6g

Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2

LOW 29

kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00522 Published 2021-12-09 Fixed in 1.16.7 CWE-352

TI-2021-02854 CVE-2021-3957 · GHSA-2xwq-h7r9-6w27

LOW 20

kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00383 Published 2021-11-19 Fixed in 1.16.2, 1.16 CWE-352

TI-2021-02860 CVE-2021-3963 · GHSA-gf2c-93hm-r9j5

LOW 20

kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00395 Published 2021-11-19 Fixed in 1.16.2, 1.16 CWE-352

TI-2021-02873 CVE-2021-3976 · GHSA-427q-jp8v-ww95

LOW 29

kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00399 Published 2021-11-19 Fixed in 1.16.2 CWE-352

TI-2019-11585 CVE-2019-15481 · GHSA-7v44-75jf-22gj

LOW 29

Kimai v2 before 1.1 has XSS via a timesheet description.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00861 Published 2019-08-23 Fixed in 1.1 CWE-79