CVE-2021-3976: Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2
Published Nov 19, 2021
·Updated
kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)
Affected Software
1 affected component
Kimai Kimai 2<1.16.2
Remediation
Event History
Nov 19, 2021
CVE Published
via MITRE·10:35 AM
Data Sourced
via MITRE·10:35 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-3976?
The severity of CVE-2021-3976 is medium with a severity value of 6.5.
2
What is the vulnerability in kimai2?
The vulnerability in kimai2 is Cross-Site Request Forgery (CSRF).
3
Which version of kimai2 is affected by CVE-2021-3976?
kimai2 version 1.16.2 and below are affected by CVE-2021-3976.
4
How can I fix the Cross-Site Request Forgery (CSRF) vulnerability in kimai2?
To fix the Cross-Site Request Forgery (CSRF) vulnerability in kimai2, upgrade to a version above 1.16.2.