Time In Status Security Vulnerabilities

CVE-2021-43851

Anuko Time Tracker is an open source, web-based time tracking application written in PHP. SQL injection vulnerability exist in multiple files in Time Tracker version 1.19.33.5606 and prior due to not properly checking of the "group" and "status" parameters in POST requests. Group parameter is...

CVE-2021-27222

In the "Time in Status" app before 4.13.0 for Jira, remote authenticated attackers can cause Stored...