Lucene search

K
osvGoogleOSV:GHSA-2XWQ-H7R9-6W27
HistoryNov 23, 2021 - 5:59 p.m.

Cross-site Scripting in kimai2

2021-11-2317:59:40
Google
osv.dev
9
cross-site scripting
csrf
kimai2
delete function
system logs

EPSS

0.001

Percentile

31.1%

Cross site request forgery vulnerability is present in delete functionality of doctor feature. This vulnerability is capable of deleting system logs

EPSS

0.001

Percentile

31.1%

Related for OSV:GHSA-2XWQ-H7R9-6W27