CyberRota Analysis
AI-GeneratedVersions of the Kimai time tracking application prior to 2.58.0 are vulnerable to a server-side request forgery (SSRF) flaw in the invoice PDF generation process, allowing attackers to exploit controlled Markdown content to make unauthorized outbound requests. This vulnerability can lead to internal network probing and potential exploitation of accessible services, posing a risk to organizations using affected versions. Users of Kimai should prioritize upgrading to version 2.58.0 or later to mitigate this security risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Kimai is an open-source time tracking application. Versions prior to 2.58.0 contain a server-side request forgery vulnerability in their invoice PDF preview and generation workflow. If an attacker can control Markdown content that is later rendered into an invoice PDF, such as `Customer.invoiceText`, the server-side PDF renderer will fetch remote image URLs embedded in Markdown image syntax. This allows the application server to issue outbound requests to attacker-controlled or internal targets during PDF rendering. The behavior can be used for internal network probing, server-side reachability checks, and potentially follow-on exploitation depending on deployment environment and accessible internal services. Version 2.58.0 patches the issue.