Approved changes feed: RSS · Atom

cpe:2.3:a:kimai:kimai:1.30.0:*:*:*:*:*:*:*

part: a version: 1.30.0 update: *

VendorKimai (6583110a-b827-5630-9aa6-4b250da143f7)
ProductKimai (4a07d631-3997-5a4f-930c-99a6277354f1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/kevinpapst/kimai2 purl2cpe 2026-06-01 10:11:24.259199
pkg:sourceforge/kimai purl2cpe 2026-06-01 10:11:24.259200

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-19825 vulnerable 2026-06-08 05:20:57.451982 Details available
Cross Site Scripting (XSS) vulnerability in kevinpapst kimai2 1.30.0 in /src/Twig/Runtime/MarkdownExtension.php, allows attackers to gain escalated privileges.
Published: 2023-02-15T00:00:00.000Z
Updated: 2025-03-19T18:50:49.758Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.