Vulnerabilidades en Kimai

37 resultados
Análisis Vexday

Kimai apresenta footprint reduzido de segurança com apenas 1 CVE registrado na base, sem evidências de exploração ativa (KEV) ou vulnerabilidades críticas. A fraqueza identificada (CWE-1275 - Improper Initialization) não representa risco imediato, e a ausência de divulgações recentes indica estabilidade relativa no perfil de vulnerabilidades do fornecedor.

CVE-2026-80195HIGHKimai before 2.63.0 Team Membership Removal via APIEPSS 0.4%CVE-2026-49865MEDIUMKimai has Server-Side Request Forgery in Invoice PDF Rendering via Markdown Image URLsEPSS 0.4%CVE-2026-42267MEDIUMKimai: Formula Injection via tag names in XLSX exportEPSS 0.3%CVE-2026-40486MEDIUMKimai's User Preferences API allows standard users to modify restricted attributes: hourly_rate, internal_rateEPSS 0.3%CVE-2026-84804MEDIUMKimai before 2.65.0 Authorization Bypass via Team Activity APIEPSS 0.3%CVE-2026-80199MEDIUMKimai before 2.54.0 Username Enumeration via Timing OracleEPSS 0.3%CVE-2026-80194HIGHKimai before 2.64.0 Missing Authorization via ProjectViewController exportEPSS 0.3%CVE-2026-84808MEDIUMKimai before 2.65.0 Authorization Bypass via API TimesheetEPSS 0.3%CVE-2026-52823MEDIUMKimai: Login CSRF in Kimai Timesheet Stop and Restart API Endpoints Allows Unauthorized State ChangesEPSS 0.3%CVE-2026-84805MEDIUMKimai 2.61.0 before 2.63.0 Authentication Bypass via APIEPSS 0.3%CVE-2026-80197HIGHKimai before 2.57.0 Improper Authorization via Favorite EndpointsEPSS 0.3%CVE-2026-80201LOWKimai before 2.53.0 API Token Leakage via Invoice TemplateEPSS 0.3%CVE-2026-84807MEDIUMKimai before 2.65.0 Authentication Bypass via Team CreationEPSS 0.3%CVE-2026-40479MEDIUMKimai: Stored XSS via Incomplete HTML Attribute Escaping in Team Member WidgetEPSS 0.2%CVE-2026-84806MEDIUMKimai before 2.63.0 Authorization Bypass via Team Access EndpointsEPSS 0.2%CVE-2026-41498LOWKimai: Team API Missing Object-Level AuthorizationEPSS 0.2%CVE-2026-49992MEDIUMKimai: Login CSRF in Default Team Creation Endpoints Allows Unauthorized Team and Permission Structure ChangesEPSS 0.2%