CVE-2021-4033: Cross-Site Request Forgery (CSRF)

December 9, 2021 (updated December 13, 2021)

kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

References

github.com/kevinpapst/kimai2/commit/1da26e041df62c10bd8075d78f2db7854d3eee07
huntr.dev/bounties/e05be1f7-d00c-4cfd-9390-ccd9d1c737b7
nvd.nist.gov/vuln/detail/CVE-2021-4033

Code Behaviors & Features

Detect and mitigate CVE-2021-4033 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →