Description (CNA)
kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| kevinpapst / kevinpapst/kimai2 | affected unspecified before 1.16.3 |
CWE
CWE-79
References
- https://huntr.dev/bounties/c96f3480-dccf-4cc2-99a4-d2b3a7462413
- https://github.com/kevinpapst/kimai2/commit/89bfa82c61da0d3639e4038e689e25467baac8a0
ADP enrichment
No English description supplied.