| Package | Affected versions | Patched versions |
|---|---|---|
| kimai/kimai | ≤ 1.30.10 | |
| kimai | = 1.30.10 |
Kimai 1.30.10 contains a SameSite cookie vulnerability that allows attackers to steal user session cookies through malicious exploitation. Attackers can trick victims into executing a crafted PHP script that captures and writes session cookie information to a file, enabling potential session hijacking.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free