Improper Neutralization of Formula Elements in a CSV File in Kimai 2

Description

References

• nvd.nist.gov/vuln/detail/CVE-2021-43515 · ADVISORY
• kevinpapst/kimai2#2532 · WEB
• kevinpapst/kimai2 commit dad1b8b · WEB
• kevinpapst/kimai2 · PACKAGE

kevinpapst/kimai2의 다른 취약점

• CVE-2021-4033보통 6.5kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)
• CVE-2021-3983보통 6.1kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2021-3992보통 6.5kimai2 is vulnerable to Improper Access Control
• CVE-2021-3985심각 9.0kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2021-3963보통 4.3kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)