Improper Authorization

kimai/kimai is vulnerable to Improper Authorization. The vulnerability is due to insufficient permission checks on the ExportController web routes, which allows a low-privileged user with createexport permission to create or modify global export templates intended to be restricted to administrato...