Skip to content
OpenAdvisories
High · 8.0 CVE-2021-3985 EUVD-2021-2609GHSA-x68c-4gmm-5g43

Cross-site Scripting (XSS) - Stored in kevinpapst/kimai2

Published Dec 1, 2021 · Updated Aug 3, 2024 · Assigned by @huntrdev

Vendor: kevinpapst Product: kevinpapst/kimai2 Package: kevinpapst/kimai2 Ecosystem: Packagist

Description

kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

VendorProductAffectedFixed
kevinpapst kevinpapst/kimai2 unspecified – < 1.16.3 1.16.3

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist kevinpapst/kimai2 < 1.16.3 1.16.3 GHSA-x68c-4gmm-5g43

References