leantime/leantime

8 results · Clear filters · Feed

• Medium 5.4
  GHSA-qrfh-cc86-vc8c

  Leantime has HTML injection through firstname and lastname fields

  ### Summary Leantime v2.3.27 is vulnerable to Stored HTML Injection. The `firstname` and `lastname` fields in the admin user edit page are rendered without HTML escaping, allowing an authenticated user to inject arbitrary HTML that executes when the profile i…

  leantime/leantime Packagist
  Mar 5, 2026
• Medium 5.4
  CVE-2025-28254

  Leantime affected by Improper Neutralization of HTML Tags

  Cross Site Scripting vulnerability in Leantime v3.2.1 and before allows an authenticated attacker to execute arbitrary code and obtain sensitive information via the first name field in processMentions().

  leantime/leantime Packagist
  Mar 28, 2025
• Medium —
  GHSA-92xh-6x7v-4rmq

  Leantime allows Cross-Site Request Forgery (CSRF)

  **CSRF** ### Summary A cross-site request forgery vulnerability allows a remote actor to create an account with Owner privileges. By luring an Owner or Administrator into clicking a button on an attacker-controlled website, a request will be issued, generatin…

  leantime/leantime Packagist
  Feb 21, 2025
• Medium —
  GHSA-63cr-xg3f-8jvr

  Leantime allows Stored Cross-Site Scripting (XSS)

  ### Summary Stored XSS, also known as persistent XSS, is the more damaging of the two. It occurs when a malicious script is injected directly into a vulnerable web application. ### Details A Stored Cross-Site Scripting (XSS) vulnerability was found that could…

  leantime/leantime Packagist
  Feb 21, 2025
• Medium —
  GHSA-52xf-h226-pfgx

  Leantime allows Refelected Cross-Site Scripting (XSS)

  ### Summary The vulnerability in Leantime's "overdue" section allows attackers to upload malicious image files containing XSS payloads. When other users view these files, the scripts execute, enabling attackers to steal sensitive information or perform unauth…

  leantime/leantime Packagist
  Feb 21, 2025
• Medium —
  GHSA-h6w8-27ph-c385

  Leantime has Insufficiently Protected Credentials

  Due to improper cache control an attacker can view sensitive information even if they are not logged into the account anymore. Additional Information: 1.The issue was identified during routine security testing. 2.This vulnerability poses a significant risk to…

  leantime/leantime Packagist
  Feb 21, 2025
• Medium —
  GHSA-mg4c-884j-pcq9

  Leantime allows Stored Cross-Site Scripting (XSS)

  STORED XSS +OPEN REDIRECTION in SVG uploads Vulnerable url:https://hack.leantime.io/projects/showProject/3

  leantime/leantime Packagist
  Feb 21, 2025
• Medium 6.5
  GHSA-99r5-84gr-59f6

  Leantime has Host Header Injection Vulnerability

  ### Summary A host header injection vulnerability has been identified in the user details viewing functionality of the system. This vulnerability allows an attacker to manipulate the host header in HTTP requests, thereby gaining unauthorized access to view de…

  leantime/leantime Packagist
  Feb 21, 2025