CLICK ME! Impact This vulnerability is capable of tricking admin user to delete invoice templates.">Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2 - vulnerability database | Vulners.comCLICK ME! Impact This vulnerability is capable of tricking admin user to delete invoice templates.">CLICK ME! Impact This vulnerability is capable of tricking admin user to delete invoice templates.">CLICK ME! Impact This vulnerability is capable of tricking admin user to delete invoice templates.">
Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
huntrHaxatron3ABF308B-7DBD-4864-B1A9-5C45B876DEF8
HistoryNov 15, 2021 - 7:43 a.m.

Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2

2021-11-1507:43:53
haxatron
www.huntr.dev
6
csrf
vulnerability
deleting
invoice templates
admin user
bug bounty

EPSS

0.001

Percentile

31.1%

JSON

Description

CSRF in deleting invoice templates

Proof of Concept

<a href="https://[KIMAi_URL]/en/invoice/template/7/delete">CLICK ME!</a>

Impact

This vulnerability is capable of tricking admin user to delete invoice templates.

Related

prion 1
veracode 1
cvelist 1
osv 2
github 1
nvd 1
cve 1
prion
prion
Cross site request forgery (csrf)
2021-11-19 12:15:00
veracode
veracode
Cross-Site Request Forgery (CSRF)
2021-11-22 07:57:19
cvelist
cvelist
CVE-2021-3963 Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2
2021-11-19 11:50:10
osv
osv
Cross-site Scripting in kimai2
2021-11-23 18:16:43
CVE-2021-3963
2021-11-19 12:15:09
github
github
Cross-site Scripting in kimai2
2021-11-23 18:16:43
nvd
nvd
CVE-2021-3963
2021-11-19 12:15:09
cve
cve
CVE-2021-3963
2021-11-19 12:15:09

EPSS

0.001

Percentile

31.1%

JSON
Related for 3ABF308B-7DBD-4864-B1A9-5C45B876DEF8
prion1veracode1cvelist1osv2github1nvd1cve1