Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-25317

Kimai 2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts into timesheet descriptions. Attackers can insert SVG-based XSS payloads in the description field to execute arbitrary JavaScript when the page is loaded and viewed by other users.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 17.5%
CVSS Severity
CVSS v3 Score 6.4
Products affected by CVE-2019-25317
  • Kimai » Kimai » Version: N/A
    cpe:2.3:a:kimai:kimai:-
  • Kimai » Kimai » Version: 0.1
    cpe:2.3:a:kimai:kimai:0.1
  • Kimai » Kimai » Version: 0.2
    cpe:2.3:a:kimai:kimai:0.2
  • Kimai » Kimai » Version: 0.3
    cpe:2.3:a:kimai:kimai:0.3
  • Kimai » Kimai » Version: 0.4
    cpe:2.3:a:kimai:kimai:0.4
  • Kimai » Kimai » Version: 0.5
    cpe:2.3:a:kimai:kimai:0.5
  • Kimai » Kimai » Version: 0.6
    cpe:2.3:a:kimai:kimai:0.6
  • Kimai » Kimai » Version: 0.6.1
    cpe:2.3:a:kimai:kimai:0.6.1
  • Kimai » Kimai » Version: 0.7
    cpe:2.3:a:kimai:kimai:0.7
  • Kimai » Kimai » Version: 0.8
    cpe:2.3:a:kimai:kimai:0.8
  • Kimai » Kimai » Version: 0.8.1
    cpe:2.3:a:kimai:kimai:0.8.1
  • Kimai » Kimai » Version: 0.9
    cpe:2.3:a:kimai:kimai:0.9
  • Kimai » Kimai » Version: 1.0
    cpe:2.3:a:kimai:kimai:1.0
  • Kimai » Kimai » Version: 1.0.1
    cpe:2.3:a:kimai:kimai:1.0.1
  • Kimai » Kimai » Version: 1.1
    cpe:2.3:a:kimai:kimai:1.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved