Описание
Cross-site Scripting in kimai2
kimai2 is vulnerable to Cross-Site Request Forgery (CSRF) in deleting invoice templates. This vulnerability is capable of tricking admin user to delete invoice templates.
Пакеты
Наименование
kevinpapst/kimai2
composer
Затронутые версииВерсия исправления
< 1.16
1.16
Связанные уязвимости
CVSS3: 4.3
nvd
около 4 лет назад
kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)