4 matches found
CVE-2021-4033
kimai2 is vulnerable to Cross-Site Request Forgery CSRF...
6.5CVSS6.9AI score
SaveExploits0References2
CVE-2021-4033
kimai2 is vulnerable to Cross-Site Request Forgery CSRF...
6.5CVSS6.5AI score0.00505EPSS
SaveExploits1References3
CVE-2021-4033 Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2
kimai2 is vulnerable to Cross-Site Request Forgery CSRF...
6.5CVSS6.7AI score0.00505EPSS
SaveExploits1References2
CVE-2021-4033
CVE-2021-4033 affects kimai2 (kevinpapst/kimai2). The connected documents specify a Cross-Site Request Forgery (CSRF) vulnerability in the Invoice area, notably in the saving of invoices and in status changes, caused by lacking token validation in the relevant request paths (e.g., createInvoiceAc...
6.5CVSS6.5AI score0.00505EPSS
SaveExploits1References2Affected Software1
20