~ / search / GHSA-2xwq-h7r9-6w27

GHSA-2xwq-h7r9-6w27

Cross-site Scripting in kimai2

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-3957

Packages

EcosystemPackageAffectedFixed in
Packagist kevinpapst/kimai2 < 1.16 1.16

Details

As written in the advisory (Markdown source, shown as plain text).

Cross site request forgery vulnerability is present in delete functionality of doctor feature. This vulnerability is capable of deleting system logs

References

External links from the advisory. They lead to third-party sites.