KI
Product
kimai
41
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 28Low 3
Watch
Add kimai to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-19825 | 9.6 | Feb 15 | Cross Site Scripting (XSS) vulnerability in kevinpapst kimai2 1.30.0 in /src/Twig/Runtime/MarkdownExtension.php, allows attackers to gain escalated privileges Affected: 1.30.0 |
| CVE-2026-52824 | 9.1 | Sep 15 | Kimai: Default APP_SECRET in Docker Image Enables Cookie Forgery and Account Takeover Affected: < 2.58.0 |
Showing 2