CVE-2024-27705

Cross Site Scripting vulnerability in Leantime v3.0.6 allows attackers to execute arbitrary code via upload of crafted PDF file to the files/browse endpoint...

CVE-2024-27705

Leantime version v3.0.6 is susceptible to a Cross Site Scripting (XSS) vulnerability that can lead to arbitrary code execution . The root cause is the ability for attackers to upload a crafted PDF file to the files/browse endpoint. This exploitation could allow for the execution of malicious scri...

CVE-2024-27705

Cross Site Scripting vulnerability in Leantime v3.0.6 allows attackers to execute arbitrary code via upload of crafted PDF file to the files/browse endpoint...