Kevinpapst 8 CVEs in 2 Kevinpapst products, including Kevinpapst/kimai2, Kimai. Newest: CVE-2019-25317 (2026-02-11). Severity, EPSS and public exploits for each.
Kevinpapst products with known CVEs Kevinpapst CVEs — newest first CVE Severity Score Published Summary CVE-2019-25317Medium 6.42026-02-11 Kimai 2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts into timesheet descriptions. Attackers can i… CVE-2021-4033Medium 6.52021-12-09 kimai2 is vulnerable to Cross-Site Request Forgery (CSRF) CVE-2021-3983Medium 6.12021-12-01 kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-3992Medium 6.52021-12-01 kimai2 is vulnerable to Improper Access Control CVE-2021-3985Critical 9.02021-12-01 kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-3963Medium 4.32021-11-19 kimai2 is vulnerable to Cross-Site Request Forgery (CSRF) CVE-2021-3957Medium 4.32021-11-19 kimai2 is vulnerable to Cross-Site Request Forgery (CSRF) CVE-2021-3976Medium 6.52021-11-19 kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)