CVE-2024-0849

CVE-2024-0849 (Leanote 2.7.0) is a local-file-read vulnerability caused by a Local File Reading (LFR) weakness, allowing an attacker to obtain arbitrary local files. The vulnerability is explicitly described in multiple sources as affecting Leanote version 2.7.0, with the impact being exposure of...

Leanote Path Traversal Vulnerability

Leanote is an open source notepad application. Leanote version 2.7.0 suffers from a path traversal vulnerability that originates from allowing access to arbitrary local files...

PT-2024-15865 · Leanote · Leanote

Name of the Vulnerable Software and Affected Versions: Leanote version 2.7.0 Description: The issue allows obtaining arbitrary local files because the application is vulnerable to Local File Reading LFR. Recommendations: For Leanote version 2.7.0, at the moment, there is no information about a...

GHSA-6CMV-2548-82V4 leanote vulnerable to cross-site scripting

A vulnerability, which was classified as problematic, has been found in leanote. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The name of the patch is...

leanote vulnerable to cross-site scripting

A vulnerability, which was classified as problematic, has been found in leanote. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The name of the patch is...

CVE-2021-4263

A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The identifier of t...

CVE-2021-4263

A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The identifier of t...

Cross site scripting

A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The identifier of t...

CVE-2021-4263 leanote history.js define cross site scripting

A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The identifier of t...

CVE-2021-4263 leanote history.js define cross site scripting

A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The identifier of t...

CVE-2021-4263

CVE-2021-4263 affects leanote 2.6.1. The vulnerability is a cross-site scripting in the define function of public/js/plugins/history.js, caused by improper handling of the content argument. It can be exploited remotely; a patch identified as 0f9733c890077942150696dcc6d2b1482b7a0a19 exists and sho...

Leanote 跨站脚本漏洞

Leanote is an open source notepad application. Leanote suffers from a cross-site scripting vulnerability that originates in the function definition of the file public/js/plugins/history.js, where manipulation of the content of the parameters results in cross-site scripting...

PT-2022-11637 · Leanote · Leanote

Name of the Vulnerable Software and Affected Versions: leanote version 2.6.1 Description: A problematic issue has been found in leanote, affecting the function define of the file public/js/plugins/history.js. The manipulation of the content argument leads to cross-site scripting. The attack may b...

Leanote Cross-Site Scripting Vulnerability (CNVD-2022-34645)

Leanote is an open source notepad application. Leanote is vulnerable to a cross-site scripting vulnerability that could be exploited by attackers to cause remote code execution using payloads...

CVE-2021-43721

Leanote 2.7.0 is vulnerable to Cross Site Scripting XSS in the markdown type note. This leads to remote code execution with payload :...

CVE-2021-43721

Leanote 2.7.0 is vulnerable to Cross Site Scripting XSS in the markdown type note. This leads to remote code execution with payload :...

Cross site scripting

Leanote 2.7.0 is vulnerable to Cross Site Scripting XSS in the markdown type note. This leads to remote code execution with payload :...

CVE-2021-43721

Leanote 2.7.0 is vulnerable to Cross Site Scripting (XSS) in the markdown type note, which the reports describe as enabling remote code execution via a crafted payload such as: . The vulnerability stems from XSS in the markdown rendering, with no additional exploit details provided beyond the pay...

CVE-2021-43721

Leanote 2.7.0 is vulnerable to Cross Site Scripting XSS in the markdown type note. This leads to remote code execution with payload :...

Leanote 跨站脚本漏洞

Leanote is an open source notepad application. Leanote is vulnerable to a cross-site scripting vulnerability that could be exploited by attackers to cause remote code execution using payloads...