Kimai v2 is vulnerable to Cross-Site Scripting (XSS)

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2019-15481 · ADVISORY
• kevinpapst/kimai2#962 · WEB
• kevinpapst/kimai2 · PACKAGE
• kevinpapst/kimai2 release 1.1 · WEB

Lỗ hổng khác của kevinpapst/kimai2

• CVE-2021-43515CAO 7.8CSV Injection (aka Excel Macro Injection or Formula Injection) exists in creating new timesheet in Kimai. By filling the Description field w…
• CVE-2021-4033TRUNG BÌNH 6.5kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)
• CVE-2021-3983TRUNG BÌNH 6.1kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2021-3992TRUNG BÌNH 6.5kimai2 is vulnerable to Improper Access Control
• CVE-2021-3985NGHIÊM TRỌNG 9.0kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')