Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-28254
5.4
MEDIUMCVSS v3
Published
March 28, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Cross Site Scripting vulnerability in Leantime v3.2.1 and before allows an authenticated attacker to execute arbitrary code and obtain sensitive information via the first name field in processMentions().
Leantime/leantime
GitHubLeantime is a goals focused project management system for non-project managers. Building with ADHD, Autism, and dyslexia in mind.
GitHubLeantime is a goals focused project management system for non-project managers. Building with ADHD, Autism, and dyslexia in mind.< 3.3.0, < 3.3NVD