Lucene search
@huntrdevCVELIST:CVE-2021-3963HistoryNov 19, 2021 - 11:50 a.m.
CVE-2021-3963 Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2
2021-11-1911:50:10
CWE-352
@huntrdev
www.cve.org
3
cve-2021-3963
cross-site request forgery
kevinpapst/kimai2
vulnerability
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AI Score
5
Confidence
High
EPSS
0.001
Percentile
31.1%
kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)
CNA Affected
[
{
"product": "kevinpapst/kimai2",
"vendor": "kevinpapst",
"versions": [
{
"lessThan": "1.16.2",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
veracode
veracode
Cross-Site Request Forgery (CSRF)
2021-11-22 07:57:19
prion
prion
Cross site request forgery (csrf)
2021-11-19 12:15:00
huntr
huntr
Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2
2021-11-15 07:43:53
osv
osv
Cross-site Scripting in kimai2
2021-11-23 18:16:43
CVE-2021-3963
2021-11-19 12:15:09
github
github
Cross-site Scripting in kimai2
2021-11-23 18:16:43
nvd
nvd
CVE-2021-3963
2021-11-19 12:15:09
cve
cve
CVE-2021-3963
2021-11-19 12:15:09
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AI Score
5
Confidence
High
EPSS
0.001
Percentile
31.1%
Related for CVELIST:CVE-2021-3963