Improper Authorization

Kimai is vulnerable to Improper Authorization. The vulnerability is due to missing parent-child consistency validation and insufficient authorization checks during rate editing operations, which allows an authenticated attacker to modify unauthorized project, customer, or activity rate records by...