medium4.3
CVE-2021-3976
Cross-site Scripting in kimai2
Impact
CSRF related to duplicate action. (the duplication occurs first before redirecting to edit form). This vulnerability is capable of tricking admin users to duplicate teams.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | kevinpapst/kimai2 | < 1.16.2 | 1.16.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kimai | Kimai 2 | before 1.16.2 |