CVE-2021-3963 MEDIUM

CVE-2021-3963: Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2

Vendor Kevinpapst
Product kevinpapst/kimai2
Weakness CWE-352 · CSRF
Published November 19, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

Key dates

02Disclosure timeline

November 19, 2021 CVE published
August 3, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2022-1827 PDF24 Article To PDF <= 4.2.2 - Arbitrary Settings Update via CSRF CVE-2022-47446 WordPress Store Locator Plugin <= 3.98.7 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2025-34430 1Panel CSRF Panel Name Modification CVE-2023-45639 WordPress Sort SearchResult By Title Plugin <= 10.0 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2022-47141 WordPress WP Dynamic Keywords Injector Plugin <= 2.3.15 is vulnerable to Cross Site Request Forgery (CSRF)