Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Kimai Subscribe
Filtered by product Kimai
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-19825 1 Kimai 1 Kimai 2023-02-22 N/A 9.6 CRITICAL
Cross Site Scripting (XSS) vulnerability in kevinpapst kimai2 1.30.0 in /src/Twig/Runtime/MarkdownExtension.php, allows attackers to gain escalated privileges.
CVE-2021-43515 1 Kimai 1 Kimai 2022-04-14 6.8 MEDIUM 7.8 HIGH
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in creating new timesheet in Kimai. By filling the Description field with malicious payload, it will be mistreated while exporting to a CSV file.