Vulners
Lucene search
4 matches found
CVE-2021-4033
kimai2 is vulnerable to Cross-Site Request Forgery CSRF...
6.5CVSS6.5AI score0.00505EPSS
Exploits1References3
CVE-2021-4033
kimai2 is vulnerable to Cross-Site Request Forgery CSRF...
6.5CVSS6.9AI score
Exploits0References2
CVE-2021-4033
CVE-2021-4033 affects kimai2 (kevinpapst/kimai2). The connected documents specify a Cross-Site Request Forgery (CSRF) vulnerability in the Invoice area, notably in the saving of invoices and in status changes, caused by lacking token validation in the relevant request paths (e.g., createInvoiceAc...
6.5CVSS6.5AI score0.00505EPSS
Exploits1References2Affected Software1
CVE-2021-4033 Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2
kimai2 is vulnerable to Cross-Site Request Forgery CSRF...
6.5CVSS6.7AI score0.00505EPSS
Exploits1References2
20