CVE-2026-80193 - Kimai before 2.62.0 fails to validate create_other_timesheet permission in the QuickEntry controller when creating new timesheets. Authenticated users with view_other_timesheet and edit_other_timesheet permissions can create timesheet records for team members by submitting the QuickEntry form, bypassing authorization checks enforced elsewhere. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-82279 [高危] CVE-2026-82279 - HyperDX through 1.10.1 fails to enforce role-based ac…
• CVE-2026-82273 [中危] CVE-2026-82273 - Mastra through 1.63.0 contains an authentication bypa…
• CVE-2026-82267 [中危] CVE-2026-82267 - Komodo through 2.3.2 discloses internal resource iden…
• CVE-2026-56100 [高危] CVE-2026-56100 - SpringBlade versions 2.7.3 through 3.5.0 contain a pr…
• CVE-2026-55545 [中危] CVE-2026-55545 - Yamcs is a mission control framework. Prior to 5.12.8…
• CVE-2026-55521 [高危] CVE-2026-55521 - Yamcs is a mission control framework. Prior to 5.12.8…
• CVE-2026-55064 [中危] CVE-2026-55064 - Vikunja is an open-source self-hosted task management…
• CVE-2026-81767 [高危] CVE-2026-81767 - Unauthenticated Broken Access Control in Simple Payme…