Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization through the restart and duplicate processes. An attacker can continue to create new timesheet entries for projects they no longer have access to by leveraging historical timesheet records after their permissions ha...

Kimai 安全漏洞

Kimai is an open source, web-based, multi-user time tracking application. A security vulnerability exists in versions prior to Kimai 2.13.0, which stems from the API returning timesheet entries that should not be viewed by authorized users...