VYPR

Kimai2

by Kimai

Source repositories

CVEs (6)

  • CVE-2021-3985CriDec 1, 2021
    risk 0.52cvss 9.0epss 0.01

    kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  • CVE-2019-15481MedAug 23, 2019
    risk 0.40cvss 6.1epss 0.01

    Kimai v2 before 1.1 has XSS via a timesheet description.

  • CVE-2021-4033MedDec 9, 2021
    risk 0.35cvss 6.5epss 0.01

    kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

  • CVE-2021-3976MedNov 19, 2021
    risk 0.35cvss 6.5epss 0.00

    kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

  • CVE-2021-3963MedNov 19, 2021
    risk 0.21cvss 4.3epss 0.00

    kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

  • CVE-2021-3957MedNov 19, 2021
    risk 0.21cvss 4.3epss 0.00

    kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)