kimai2 is vulnerable to Improper Access Control

Description

References

• nvd.nist.gov/vuln/detail/CVE-2021-3992 · ADVISORY
• kevinpapst/kimai2 commit ff9acab · WEB
• kevinpapst/kimai2 · PACKAGE
• huntr.dev/bounties/a0c438fb-c8e1-40cf-acc6-c8a532b80b93 · WEB

Mais vulnerabilidades de kevinpapst/kimai2

• CVE-2021-43515ALTO 7.8CSV Injection (aka Excel Macro Injection or Formula Injection) exists in creating new timesheet in Kimai. By filling the Description field w…
• CVE-2021-4033MÉDIO 6.5kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)
• CVE-2021-3983MÉDIO 6.1kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2021-3985CRÍTICO 9.0kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2021-3963MÉDIO 4.3kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)