Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-27705
7.6
HIGHCVSS v3
Published
April 3, 2024
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Cross Site Scripting vulnerability in Leantime v3.0.6 allows attackers to execute arbitrary code via upload of crafted PDF file to the files/browse endpoint.
Leantime/leantime
GitHubLeantime is a goals focused project management system for non-project managers. Building with ADHD, Autism, and dyslexia in mind.
GitHubLeantime is a goals focused project management system for non-project managers. Building with ADHD, Autism, and dyslexia in mind.= 3.0.6NVD