Lucene search

K
osvGoogleOSV:GHSA-GF2C-93HM-R9J5
HistoryNov 23, 2021 - 6:16 p.m.

Cross-site Scripting in kimai2

2021-11-2318:16:43
Google
osv.dev
5
kimai2
cross-site scripting
csrf
admin user
invoice templates

EPSS

0.001

Percentile

31.1%

kimai2 is vulnerable to Cross-Site Request Forgery (CSRF) in deleting invoice templates. This vulnerability is capable of tricking admin user to delete invoice templates.

EPSS

0.001

Percentile

31.1%

Related for OSV:GHSA-GF2C-93HM-R9J5