Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-80200

Kimai before 2.53.0 Open Redirect via RelayState

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

Kimai before 2.53.0 contains an open redirect vulnerability in the SAML authentication success handler that accepts unvalidated RelayState POST parameters as redirect destinations. Attackers with IdP access can supply malicious RelayState values to redirect authenticated users to attacker-controlled URLs for credential theft or phishing attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

kimai kimai

Default version status: unaffected

  • 0 to < 2.53.0affected
  • 2.53.0unaffected
pkg:composer/kimai/kimai

References