Cross-site Scripting in kimai2

CSRF related to duplicate action. the duplication occurs first before redirecting to edit form. This vulnerability is capable of tricking admin users to duplicate teams...

Cross-Site Request Forgery (CSRF)

kevinpapst/kimai2 is vulnerable to cross-site request forgery. An attacker can add admin users to duplicate teams through the duplicateAction function in ProjectController.php...