Approved changes feed: RSS · Atom

cpe:2.3:a:kevinpapst:kevinpapst/kimai2:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKevinpapst (bdd6ae22-82b7-5936-9498-6c2910d44c99)
ProductKevinpapst/Kimai2 (fd71a3dc-5613-5dff-9cee-9382acddcd55)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-4033 vulnerable 2026-06-08 05:38:08.121928 Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2
MEDIUM (6.5)
kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)
Published: 2021-12-09T19:55:10.000Z
Updated: 2024-08-03T17:16:03.733Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3992 vulnerable 2026-06-08 05:35:16.534805 Improper Access Control in kevinpapst/kimai2
MEDIUM (6.5)
kimai2 is vulnerable to Improper Access Control
Published: 2021-12-01T10:45:11.000Z
Updated: 2024-08-03T17:16:03.035Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3985 vulnerable 2026-06-08 05:33:58.371196 Cross-site Scripting (XSS) - Stored in kevinpapst/kimai2
HIGH (8)
kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: 2021-12-01T11:05:11.000Z
Updated: 2024-08-03T17:09:09.862Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3983 vulnerable 2026-06-08 05:33:58.369196 Cross-site Scripting (XSS) - Stored in kevinpapst/kimai2
MEDIUM (6.3)
kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: 2021-12-01T11:15:12.000Z
Updated: 2024-08-03T17:09:09.686Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3976 vulnerable 2026-06-08 05:33:58.318699 Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2
MEDIUM (4.3)
kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)
Published: 2021-11-19T10:35:10.000Z
Updated: 2024-08-03T17:09:09.628Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3963 vulnerable 2026-06-08 05:33:58.117804 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3957 vulnerable 2026-06-08 05:33:58.111795 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.