Packagist/kimai/kimai: medium 6.5
Kimai has an XXE Leading to Local File Read
Action: Upgrade kimai/kimai to 2.21.0 or later.
composer require kimai/kimai:2.21.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.21.0 | - |
Fixed versions
| 2.21.0 |
Sources
- osv: GHSA-534c-hcr7-67jg
- https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-ghg6-32f9-2jp7
- https://github.com/kimai/kimai/security/advisories/GHSA-534c-hcr7-67jg
- https://github.com/kimai/kimai/commit/3204dcb03e1003dba90178667a4667ce3edb87b5
- https://github.com/kimai/kimai
published · modified · JSON