CVE-2024-27705

概要

参考情報

• b-hermes/vulnerability-research · Exploit

leantime のその他の脆弱性

• CVE-2025-28254中 5.4Cross Site Scripting vulnerability in Leantime v3.2.1 and before allows an authenticated attacker to execute arbitrary code and obtain sensi…
• CVE-2024-27477中 6.1In Leantime 3.0.6, a Cross-Site Scripting vulnerability exists within the ticket creation and modification functionality, allowing attackers…
• CVE-2024-27476中 4.7Leantime 3.0.6 is vulnerable to HTML Injection via /dashboard/show#/tickets/newTicket.
• CVE-2024-27474高 8.8Leantime 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF). This vulnerability allows malicious actors to perform unauthorized action…
• CVE-2024-27703中 5.4Cross Site Scripting vulnerability in Leantime 3.0.6 allows a remote attacker to execute arbitrary code via the to-do title parameter.