Advisories · Technology
kimai.
Every CVE that names kimai among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Kimai before 2.65.0 Authorization Bypass via API Timesheet
- kimai
- Broken access control
- CVSS 5.3 Medium
Kimai before 2.65.0 Authentication Bypass via Team Creation
- kimai
- Privilege escalation
- CVSS 5.3 Medium
Kimai before 2.63.0 Authorization Bypass via Team Access Endpoints
- kimai
- Broken access control
- CVSS 5.3 Medium
Kimai 2.61.0 before 2.63.0 Authentication Bypass via API
- kimai
- Broken access control
- CVSS 5.3 Medium
Kimai before 2.65.0 Authorization Bypass via Team Activity API
- kimai
- Broken access control
- CVSS 8.7 High
Kimai before 2.63.0 Team Membership Removal via API
- kimai
- CWE-841
- CVSS 8.7 High
Kimai before 2.64.0 Missing Authorization via ProjectViewController export
- kimai
- Information disclosure
- CVSS 8.7 High
Kimai before 2.62.0 Authorization Bypass via QuickEntry
- kimai
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
Kimai 0.9.2 db_restore.php SQL Injection
- Kimai
- SQL injection