CVE-2021-4033

kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

Score

CVSS 3.1 6.5 Medium

Status

Modified - security@huntr.dev

Published

2021-12-09

Last modified

2024-08-03

Weaknesses

CWE-352

Affected products

• Kevinpapstkimai2 (Kevinpapst)
• Kimai 2 (Kimai)

References

• https://github.com/kevinpapst/kimai2/commit/1da26e041df62c10bd8075d78f2db7854d3eee07
• https://huntr.dev/bounties/e05be1f7-d00c-4cfd-9390-ccd9d1c737b7