CVE-2019-15481
1 advisory.
Packagist/kevinpapst/kimai2 CVE-2019-15481: medium 6.1, EPSS 0.86%
Kimai v2 is vulnerable to Cross-Site Scripting (XSS)
Action: Upgrade kevinpapst/kimai2 to 1.1 or later.
composer require kevinpapst/kimai2:1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1 | - |
Fixed versions
| 1.1 |
Sources
- osv: GHSA-7v44-75jf-22gj
- https://nvd.nist.gov/vuln/detail/CVE-2019-15481
- https://github.com/kevinpapst/kimai2/pull/962
- https://github.com/kevinpapst/kimai2
- https://github.com/kevinpapst/kimai2/releases/tag/1.1
CVE-2019-15481 · published · modified · JSON