Lucene search

K
osvGoogleOSV:GHSA-427Q-JP8V-WW95
HistoryNov 23, 2021 - 6:16 p.m.

Cross-site Scripting in kimai2

2021-11-2318:16:50
Google
osv.dev
10
cross-site scripting
csrf
vulnerabilities
kimai2
software

EPSS

0.001

Percentile

31.1%

CSRF related to duplicate action. (the duplication occurs first before redirecting to edit form). This vulnerability is capable of tricking admin users to duplicate teams.

EPSS

0.001

Percentile

31.1%