kimai/kimai

License

>=0.1, <1.30.4;

>=1.30.5, <2.0.0-beta;

>=1.30.4, <1.30.5;

>=2.61.0;

Unknown>=2.0.0-beta, <2.61.0;

Known vulnerabilities in the kimai/kimai package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
C Insecure Default Initialization of Resource	<2.58.0
H Improper Authentication	<2.59.0
M Cross-site Request Forgery (CSRF)	<2.58.0
M Missing Authorization	<2.57.0
M Missing Authorization	<2.58.0
M Authorization Bypass Through User-Controlled Key	<2.57.0
M Missing Authorization	<2.58.0
M Missing Authorization	<2.58.0
M Authorization Bypass Through User-Controlled Key	<2.57.0
M Incorrect Authorization	<2.57.0
M Cross-site Request Forgery (CSRF)	<2.58.0
M Server-side Request Forgery (SSRF)	<2.58.0
M Missing Authorization	<2.57.0
M Weak Password Recovery Mechanism for Forgotten Password	<2.58.0
M Directory Traversal	>=2.32.0, <2.56.0
H Incorrect Authorization	<2.56.0
M Protection Mechanism Failure	<2.56.0
M CSV Injection	>=2.27.0, <2.54.0
L Missing Authorization	<2.54.0
M Timing Attack	<2.54.0
M Cross-site Scripting (XSS)	<2.53.0
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	<2.53.0
L Incomplete List of Disallowed Inputs	<2.53.0
H Missing Authorization	<2.51.0
H Improper Neutralization of Special Elements Used in a Template Engine	>=0.8, <2.46.0
H XML External Entity (XXE) Injection	<2.21.0
L Information Exposure	<2.16.0
M Exposure of Sensitive Information to an Unauthorized Actor	<2.13.0
H Eval Injection	<2.1.0