Kimai2
by Kimai
Source repositories
CVEs (6)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-3985 | Cri | 0.52 | 9.0 | 0.01 | Dec 1, 2021 | kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | ||
| CVE-2019-15481 | Med | 0.40 | 6.1 | 0.01 | Aug 23, 2019 | Kimai v2 before 1.1 has XSS via a timesheet description. | ||
| CVE-2021-4033 | Med | 0.35 | 6.5 | 0.01 | Dec 9, 2021 | kimai2 is vulnerable to Cross-Site Request Forgery (CSRF) | ||
| CVE-2021-3976 | Med | 0.35 | 6.5 | 0.00 | Nov 19, 2021 | kimai2 is vulnerable to Cross-Site Request Forgery (CSRF) | ||
| CVE-2021-3963 | Med | 0.21 | 4.3 | 0.00 | Nov 19, 2021 | kimai2 is vulnerable to Cross-Site Request Forgery (CSRF) | ||
| CVE-2021-3957 | Med | 0.21 | 4.3 | 0.00 | Nov 19, 2021 | kimai2 is vulnerable to Cross-Site Request Forgery (CSRF) |
- risk 0.52cvss 9.0epss 0.01
kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- risk 0.40cvss 6.1epss 0.01
Kimai v2 before 1.1 has XSS via a timesheet description.
- risk 0.35cvss 6.5epss 0.01
kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)
- risk 0.35cvss 6.5epss 0.00
kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)
- risk 0.21cvss 4.3epss 0.00
kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)
- risk 0.21cvss 4.3epss 0.00
kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)