Description
Cross Site Scripting vulnerability in Leantime v3.0.6 allows attackers to execute arbitrary code via upload of crafted PDF file to the files/browse endpoint.
High · 7.6
CVE-2024-27705
EUVD-2024-24899GHSA-c4vq-6w73-6rm7
Cross Site Scripting vulnerability in Leantime v3.0.6 allows attackers to execute arbitrary code via upload of crafted PDF file to the file…
Published Apr 3, 2024 · Updated Aug 28, 2024 · Assigned by mitre