CVE-2021-3992
1 advisory.
Packagist/kevinpapst/kimai2 CVE-2021-3992: medium 6.5, EPSS 1.06%
kimai2 is vulnerable to Improper Access Control
Action: Upgrade kevinpapst/kimai2 to 1.16.3 or later.
composer require kevinpapst/kimai2:1.16.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.16.3 | - |
Fixed versions
| 1.16.3 |
Sources
- osv: GHSA-9w8f-7wgr-2h7g
- https://nvd.nist.gov/vuln/detail/CVE-2021-3992
- https://github.com/kevinpapst/kimai2/commit/ff9acab0fc81f0e9490462739ef15fe4ab028ea5
- https://github.com/kevinpapst/kimai2
- https://huntr.dev/bounties/a0c438fb-c8e1-40cf-acc6-c8a532b80b93
CVE-2021-3992 · published · modified · JSON