Description
Leanote version 2.7.0 allows obtaining arbitrary local files. This is possible because the application is vulnerable to LFR.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Leanote | Leanote | 2.7.0 | — |
Medium · 5.0
CVE-2024-0849
EUVD-2024-16632GHSA-rpw7-c5cp-v8vp
Leanote 2.7.0 - Local File Read
Published Feb 7, 2024 · Updated Apr 20, 2026 · Assigned by Fluid Attacks