Browse CVEs

MEDIUM 5.4 CVE-2025-28254 Cross Site Scripting vulnerability in Leantime v3.2.1 and before allows an authenticated attacker to execute arbitrary code and obtain sensitive info… Leantime 3.3.0+ Fix from $1,6002025-03-28 HIGH 8.8 CVE-2024-27474 Leantime 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF). This vulnerability allows malicious actors to perform unauthorized actions on beha… Leantime No fix yet Fix from $1,9502024-04-10 MEDIUM 6.1 CVE-2024-27477 In Leantime 3.0.6, a Cross-Site Scripting vulnerability exists within the ticket creation and modification functionality, allowing attackers to injec… Leantime No fix yet Fix from $1,6002024-04-10 HIGH 7.6 CVE-2024-27705 Cross Site Scripting vulnerability in Leantime v3.0.6 allows attackers to execute arbitrary code via upload of crafted PDF file to the files/browse e… Leantime No fix yet Fix from $1,9502024-04-03 MEDIUM 5.4 CVE-2024-27703 Cross Site Scripting vulnerability in Leantime 3.0.6 allows a remote attacker to execute arbitrary code via the to-do title parameter. Leantime No fix yet Fix from $1,6002024-03-13 MEDIUM 6.5 CVE-2023-45826 Leantime is an open source project management system. A 'userId' variable in `app/domain/files/repositories/class.files.php` is not parameterized. An… Leantime 2.4+ Fix from $1,6002023-10-19 MEDIUM 5.4 CVE-2023-33961 Leantime is a lean open source project management system. Starting in version 2.3.21, an authenticated user with commenting privileges can inject mal… Leantime Mitigation only Fix from $1,6002023-05-30 HIGH 8.8 CVE-2020-5292 Leantime before versions 2.0.15 and 2.1-beta3 has a SQL Injection vulnerability. The impact is high. Malicious users/attackers can execute arbitrary … Leantime 2.0.15+ Fix from $1,9502020-03-31