Skip to content
OpenAdvisories

Package · Packagist

leantime/leantime

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low —
    GHSA-f679-254h-qhvj

    Leantime allows Cross-Site Scripting (XSS)

    ### Summary There is a cross-site scripting vulnerability on To-Do that affects a title field of a To-Do.

    leantime/leantime Packagist
  • Low —
    GHSA-3hfj-qcvj-4hx8

    Leantime has Missing Authorization Check for Host Parameter

    ### Finding Description Application has functionality for a user to view profile information. It does not have an implemented authorization check for "Host" parameter which allows a user to view profile information of another user by replacing "Host" paramete…

    leantime/leantime Packagist