NA

CVE-2024-27705

Published: 03/04/2024 Updated: 04/04/2024

Vulnerability Summary

Cross Site Scripting vulnerability in Leantime v3.0.6 allows malicious users to execute arbitrary code via upload of crafted PDF file to the files/browse endpoint.