Leantime has Insufficiently Protected Credentials

中GHSA-h6w8-27ph-c385 · 21/02/2025 公開 · 21/02/2025 更新

要点

GHSA-h6w8-27ph-c385 は leantime/leantime に影響する深刻度「中」の脆弱性です。
対処：3.3 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
leantime/leantime Packagist	`< 3.3`	`3.3`

概要

Due to improper cache control an attacker can view sensitive information even if they are not logged into the account anymore.

Additional Information:

1.The issue was identified during routine security testing.
2.This vulnerability poses a significant risk to user privacy and data security.
3.Urgent action is recommended to mitigate this vulnerability and protect user data from unauthorized access.

参考情報

Leantime/leantime security advisory · WEB
Leantime/leantime · PACKAGE

leantime/leantime のその他の脆弱性

すべて見る →

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン

パッケージ

影響を受けるバージョン

修正済みバージョン

leantime/leantime

Packagist

< 3.3

3.3

概要

Due to improper cache control an attacker can view sensitive information even if they are not logged into the account anymore.

Additional Information:

1.The issue was identified during routine security testing.
2.This vulnerability poses a significant risk to user privacy and data security.
3.Urgent action is recommended to mitigate this vulnerability and protect user data from unauthorized access.

leantime/leantime のその他の脆弱性

すべて見る →