CVE-2021-3976

kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

Score

CVSS 3.1 6.5 Medium

Status

Modified - security@huntr.dev

Published

2021-11-19

Last modified

2024-08-03

Weaknesses

CWE-352

Affected products

• Kevinpapstkimai2 (Kevinpapst)
• Kimai 2 (Kimai)

References

• https://github.com/kevinpapst/kimai2/commit/b28e9c120c87222e21a238f1b03a609d6a5d506e
• https://huntr.dev/bounties/0567048a-118c-42ec-9f94-b55533017406