Kevinpapst

8 CVEs across 2 Kevinpapst products. Browse Kevinpapst vulnerabilities, severities, and proof-of-concept exploits.

Kevinpapst products with known CVEs

ProductCVEs
Kevinpapst/kimai27
Kimai1
Kevinpapst CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2019-25317Medium6.42026-02-11Kimai 2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts into timesheet descriptions. Attackers can i…
CVE-2021-4033Medium6.52021-12-09kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2021-3983Medium6.12021-12-01kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3992Medium6.52021-12-01kimai2 is vulnerable to Improper Access Control
CVE-2021-3985Critical9.02021-12-01kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3963Medium4.32021-11-19kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2021-3957Medium4.32021-11-19kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2021-3976Medium6.52021-11-19kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)