CVE-2024-27705

Cross Site Scripting vulnerability in Leantime v3.0.6 allows attackers to execute arbitrary code via upload of crafted PDF file to the files/browse endpoint...

PT-2024-21997 · Leantime · Leantime

Name of the Vulnerable Software and Affected Versions: Leantime version 3.0.6 Description: The issue allows attackers to execute arbitrary code via the upload of a crafted PDF file to the "files/browse" endpoint. This enables the execution of malicious scripts, potentially leading to unauthorized...

Leantime Systems Leantime 跨站脚本漏洞

Leantime Systems Leantime is an open source project management system based on PHP and MySQL from Leantime Systems. A cross-site scripting vulnerability exists in Leantime version v3.0.6, which originates from a vulnerability that allows an attacker to execute arbitrary code by uploading a crafte...

CVE-2024-27705

Cross Site Scripting vulnerability in Leantime v3.0.6 allows attackers to execute arbitrary code via upload of crafted PDF file to the files/browse endpoint...

CVE-2024-27705

Leantime version v3.0.6 is susceptible to a Cross Site Scripting (XSS) vulnerability that can lead to arbitrary code execution . The root cause is the ability for attackers to upload a crafted PDF file to the files/browse endpoint. This exploitation could allow for the execution of malicious scri...

CVE-2024-27705: Improper Control of Generation of Code

Cross Site Scripting vulnerability in Leantime v3.0.6 allows attackers to execute arbitrary code via upload of crafted PDF file to the files/browse endpoint...