Skip to content
OpenAdvisories

Vendor

Leantime

13 known vulnerabilities.

Products

Leantime 12 JSON-RPC API 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-66414

    Leantime Open Redirect in Login Controller via redirectUrl Parameter

    Leantime 3.6.2 contains an open redirect vulnerability in the Login controller that allows unauthenticated attackers to redirect authenticated users to arbitrary external sites by manipulating the redirectUrl POST parameter. Attackers can craft a malicious lo…

    Leantime Leantime
  • Medium 6.5
    CVE-2026-66412

    Leantime all versions prior to and 3.6.2 Broken Access Control via tickets.getMilestone JSON-RPC

    Leantime 3.6.2 and prior contains a broken access control vulnerability that allows authenticated users to read milestone data from projects they are not assigned to by supplying arbitrary integer milestone IDs to the tickets.getMilestone JSON-RPC endpoint. A…

    Leantime Leantime
  • Medium 6.5
    CVE-2023-45826 Scanner template

    Authenticated SQL Injection in leantime

    Leantime is an open source project management system. A 'userId' variable in `app/domain/files/repositories/class.files.php` is not parameterized. An authenticated attacker can send a carefully crafted POST request to `/api/jsonrpc` to exploit an SQL injectio…

    Leantime Leantime