CVE-2024-27477

Mô tả

Tham khảo

• drive.proton.me/urls/35CKB8RV04 · Broken Link
• Leantime/leantime · Product
• dead1nfluence/Leantime-POC · Exploit
• vicarius.io/vsociety/posts/analyzing-leantime-xss-for-the-fun-time-diving-into-cve-2024-27477-for-a-beginner · Exploit

Lỗ hổng khác của leantime

• CVE-2025-28254TRUNG BÌNH 5.4Cross Site Scripting vulnerability in Leantime v3.2.1 and before allows an authenticated attacker to execute arbitrary code and obtain sensi…
• CVE-2024-27476TRUNG BÌNH 4.7Leantime 3.0.6 is vulnerable to HTML Injection via /dashboard/show#/tickets/newTicket.
• CVE-2024-27474CAO 8.8Leantime 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF). This vulnerability allows malicious actors to perform unauthorized action…
• CVE-2024-27705CAO 7.6Cross Site Scripting vulnerability in Leantime v3.0.6 allows attackers to execute arbitrary code via upload of crafted PDF file to the files…
• CVE-2024-27703TRUNG BÌNH 5.4Cross Site Scripting vulnerability in Leantime 3.0.6 allows a remote attacker to execute arbitrary code via the to-do title parameter.