Leantime kayıtları

leantime üreticisine ait 9 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 2
Düzeltme kaydı olan: %22,2
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

9 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
35İzleyin	CVE-2020-5292İstismar yok	Time-based blind injection in Leantimeleantime · leantime · CWE-89 RCE SQL enjeksiyonu	Yüksek8,8	—	%1,4	31 Mar 2020
35İzleyin	CVE-2024-27474Kavram kanıtı	Leantime 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF).leantime · leantime · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,6	10 Nis 2024
30İzleyin	CVE-2024-27705İstismar yok	Cross Site Scripting vulnerability in Leantime v3.0.6 allows attackers to execute arbitrary code via upload of crafted PDF file to the filesleantime · leantime · CWE-94 Girişsiz RCE	Yüksek7,6	—	%0,5	3 Nis 2024
27İzleyin	CVE-2023-45826Kavram kanıtı	Authenticated SQL Injection in leantimeleantime · leantime · CWE-89 SQL enjeksiyonu	Orta6,5	—	%1,8	19 Eki 2023
24İzleyin	CVE-2024-27477İstismar yok	In Leantime 3.0.6, a Cross-Site Scripting vulnerability exists within the ticket creation and modification functionality, allowing attackersleantime · leantime · CWE-79 Kimlik doğrulamasız SSRF XSS	Orta6,1	—	%0,6	10 Nis 2024
21İzleyin	CVE-2024-27703İstismar yok	Cross Site Scripting vulnerability in Leantime 3.0.6 allows a remote attacker to execute arbitrary code via the to-do title parameter.leantime · leantime · CWE-79 RCE XSS	Orta5,4	—	%0,5	13 Mar 2024
21İzleyin	CVE-2023-33961İstismar yok	Leantime Stored Cross-site Scripting Vulnerabilityleantime · leantime · CWE-79 XSS	Orta5,4	—	%0,3	30 May 2023
21İzleyin	CVE-2025-28254İstismar yok	Cross Site Scripting vulnerability in Leantime v3.2.1 and before allows an authenticated attacker to execute arbitrary code and obtain sensileantime · leantime · CWE-79 RCE XSS	Orta5,4	—	%0,3	28 Mar 2025
18İzleyin	CVE-2024-27476İstismar yok	Leantime 3.0.6 is vulnerable to HTML Injection via /dashboard/show#/tickets/newTicket.leantime · leantime · CWE-94 Girişsiz RCE	Orta4,7	—	%0,6	10 Nis 2024

CVE-2020-5292
35İzleyin
Time-based blind injection in Leantime
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- SQL enjeksiyonu
leantime · leantime31 Mar 2020
CVE-2024-27474
35İzleyin
Leantime 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF).
YüksekCVSS 8,8Kavram kanıtıEPSS %0
- Kimlik doğrulamasız
- CSRF
leantime · leantime10 Nis 2024
CVE-2024-27705
30İzleyin
Cross Site Scripting vulnerability in Leantime v3.0.6 allows attackers to execute arbitrary code via upload of crafted PDF file to the files
YüksekCVSS 7,6İstismar yokEPSS %0
- Girişsiz RCE
leantime · leantime3 Nis 2024
CVE-2023-45826
27İzleyin
Authenticated SQL Injection in leantime
OrtaCVSS 6,5Kavram kanıtıEPSS %1
- SQL enjeksiyonu
leantime · leantime19 Eki 2023
CVE-2024-27477
24İzleyin
In Leantime 3.0.6, a Cross-Site Scripting vulnerability exists within the ticket creation and modification functionality, allowing attackers
OrtaCVSS 6,1İstismar yokEPSS %0
leantime · leantime10 Nis 2024
CVE-2024-27703
21İzleyin
Cross Site Scripting vulnerability in Leantime 3.0.6 allows a remote attacker to execute arbitrary code via the to-do title parameter.
OrtaCVSS 5,4İstismar yokEPSS %0
- RCE
- XSS
leantime · leantime13 Mar 2024
CVE-2023-33961
21İzleyin
Leantime Stored Cross-site Scripting Vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
leantime · leantime30 May 2023
CVE-2025-28254
21İzleyin
Cross Site Scripting vulnerability in Leantime v3.2.1 and before allows an authenticated attacker to execute arbitrary code and obtain sensi
OrtaCVSS 5,4İstismar yokEPSS %0
- RCE
- XSS
leantime · leantime28 Mar 2025
CVE-2024-27476
18İzleyin
Leantime 3.0.6 is vulnerable to HTML Injection via /dashboard/show#/tickets/newTicket.
OrtaCVSS 4,7İstismar yokEPSS %0
- Girişsiz RCE
leantime · leantime10 Nis 2024