Lucene search
+L

9577 matches found

Snyk
Snyk
added 2026/01/18 11:48 p.m.21 views

Improper Neutralization of Special Elements Used in a Template Engine

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the export process. An attacker with export permissions can access sensitive information, including environment variables, user password hashes, serialized sessio...

8.2CVSS5.8AI score0.00404EPSS
SaveExploits1References2
NVD
NVD
added 2026/01/18 11:15 p.m.12 views

CVE-2026-23626

Kimai is a web-based multi-user time-tracking application. Prior to version 2.46.0, Kimai's export functionality uses a Twig sandbox with an overly permissive security policy DefaultPolicy that allows arbitrary method calls on objects available in the template context. An authenticated user with...

6.8CVSS0.00404EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2026/01/18 10:45 p.m.5 views

CVE-2026-23626 Kimai Vulnerable to Authenticated Server-Side Template Injection (SSTI)

Kimai is a web-based multi-user time-tracking application. Prior to version 2.46.0, Kimai's export functionality uses a Twig sandbox with an overly permissive security policy DefaultPolicy that allows arbitrary method calls on objects available in the template context. An authenticated user with...

6.8CVSS5.7AI score0.00404EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/01/18 10:45 p.m.25 views

CVE-2026-23626 Kimai Vulnerable to Authenticated Server-Side Template Injection (SSTI)

Kimai is a web-based multi-user time-tracking application. Prior to version 2.46.0, Kimai's export functionality uses a Twig sandbox with an overly permissive security policy DefaultPolicy that allows arbitrary method calls on objects available in the template context. An authenticated user with...

6.8CVSS0.00404EPSS
SaveExploits1References4
OSV
OSV
added 2026/01/18 10:45 p.m.12 views

CVE-2026-23626 Kimai Vulnerable to Authenticated Server-Side Template Injection (SSTI)

Kimai is a web-based multi-user time-tracking application. Prior to version 2.46.0, Kimai's export functionality uses a Twig sandbox with an overly permissive security policy DefaultPolicy that allows arbitrary method calls on objects available in the template context. An authenticated user with...

6.8CVSS5.7AI score
SaveExploits0References6
CVE
CVE
added 2026/01/18 10:45 p.m.35 views

CVE-2026-23626

Kimai (time-tracking app) before v2.46.0 is vulnerable to an authenticated SSTI via the export template sandbox. The export policy uses DefaultPolicy, which imposes no restrictions on Twig tags, methods, or properties, allowing an attacker with export permissions to deploy a malicious Twig templa...

6.8CVSS6.4AI score0.00404EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/18 10:45 p.m.4 views

CVE-2026-23626

Kimai is a web-based multi-user time-tracking application. Prior to version 2.46.0, Kimai's export functionality uses a Twig sandbox with an overly permissive security policy DefaultPolicy that allows arbitrary method calls on objects available in the template context. An authenticated user with...

6.8CVSS5.5AI score0.00404EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2026/01/18 12:00 a.m.14 views

Kimai security vulnerabilities

Kimai is a web-based, multi-user time tracking application developed by Kimai’s developers. Versions of Kimai prior to 2.46.0 contained security vulnerabilities. These vulnerabilities stemmed from the overly lax security policies for the Twig sandbox used in the export function, which allowed...

6.8CVSS5.9AI score0.00404EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/01/18 12:00 a.m.13 views

PT-2026-3401

Name of the Vulnerable Software and Affected Versions Kimai versions prior to 2.46.0 Description Kimai is a web-based multi-user time-tracking application. The export functionality utilizes a Twig sandbox with an overly permissive security policy DefaultPolicy, enabling arbitrary method calls on...

6.8CVSS5.6AI score0.00404EPSS
SaveExploits1References12
NVD
NVD
added 2026/01/16 7:16 p.m.18 views

CVE-2025-61873

Best Practical Request Tracker RT before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via ticket values when TSV export is used...

2.6CVSS0.00201EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/16 7:16 p.m.9 views

UBUNTU-CVE-2025-61873

Best Practical Request Tracker RT before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via ticket values when TSV export is used...

2.6CVSS5.8AI score0.00201EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/16 12:00 a.m.5 views

CVE-2025-61873

Best Practical Request Tracker RT before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via ticket values when TSV export is used...

2.6CVSS5.4AI score0.00201EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/16 12:00 a.m.5 views

CVE-2025-61873

Best Practical Request Tracker RT before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via ticket values when TSV export is used...

2.6CVSS6.8AI score0.00201EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/16 12:00 a.m.29 views

CVE-2025-61873

Best Practical Request Tracker RT before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via ticket values when TSV export is used...

2.6CVSS0.00201EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.4 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001474)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001474 advisory. fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, allows remote attackers to traverse to other par...

6.5CVSS6.6AI score0.02417EPSS
SaveExploits0References4
CVE
CVE
added 2026/01/16 12:00 a.m.31 views

CVE-2025-61873

Summary: CVE-2025-61873 affects Best Practical Request Tracker (RT). The connected Debian advisory confirms the issue is a CSV injection vulnerability in RT exports to TSV from search results, caused by ticket values containing certain characters and exported in TSV, enabling injection. Debian li...

2.6CVSS6.6AI score0.00201EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/15 4:16 p.m.10 views

CVE-2021-47768

ImportExportTools NG 10.0.4 contains a persistent HTML injection vulnerability in the email export module that allows remote attackers to inject malicious HTML payloads. Attackers can send emails with crafted HTML in the subject that execute during HTML export, potentially compromising user data ...

6.1CVSS0.00332EPSS
SaveExploits1References4
OSV
OSV
added 2026/01/15 4:16 p.m.10 views

CVE-2021-47768

ImportExportTools NG 10.0.4 contains a persistent HTML injection vulnerability in the email export module that allows remote attackers to inject malicious HTML payloads. Attackers can send emails with crafted HTML in the subject that execute during HTML export, potentially compromising user data ...

5.3CVSS6AI score
SaveExploits0References4
EUVD
EUVD
added 2026/01/15 3:52 p.m.6 views

EUVD-2026-2765

ImportExportTools NG 10.0.4 contains a persistent HTML injection vulnerability in the email export module that allows remote attackers to inject malicious HTML payloads. Attackers can send emails with crafted HTML in the subject that execute during HTML export, potentially compromising user data ...

6.1CVSS6.8AI score0.00332EPSS
SaveExploits1References6
CVE
CVE
added 2026/01/15 3:52 p.m.25 views

CVE-2021-47768

The CVE-2021-47768 entry concerns ImportExportTools NG 10.0.4, where a persistent HTML injection flaw exists in the email export module. The vulnerability allows remote attackers to inject malicious HTML payloads by crafting HTML in the subject line, which can execute during HTML export and poten...

6.1CVSS6.9AI score0.00332EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder