CVE-2021-3985
1 advisory.
Packagist/kevinpapst/kimai2 CVE-2021-3985: high 8
kimai2 is vulnerable to Cross-site Scripting
Action: Upgrade kevinpapst/kimai2 to 1.16.3 or later.
composer require kevinpapst/kimai2:1.16.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.16.3 | - |
Fixed versions
| 1.16.3 |
Sources
- osv: GHSA-x68c-4gmm-5g43
- https://nvd.nist.gov/vuln/detail/CVE-2021-3985
- https://github.com/kevinpapst/kimai2/commit/76e09447c85e762882126b49626a4fe4d93fe8b5
- https://github.com/kevinpapst/kimai2
- https://github.com/kevinpapst/kimai2/releases/tag/1.16.3
- https://huntr.dev/bounties/89d6c3de-efbd-4354-8cc8-46e999e4c5a4
CVE-2021-3985 · published · modified · JSON