Leantime 3.0.6 is vulnerable to Cross Site Request...
High severity
Unreviewed
Published
Apr 10, 2024
to the GitHub Advisory Database
•
Updated Aug 22, 2024
Description
Published by the National Vulnerability Database
Apr 10, 2024
Published to the GitHub Advisory Database
Apr 10, 2024
Last updated
Aug 22, 2024
Leantime 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF). This vulnerability allows malicious actors to perform unauthorized actions on behalf of authenticated users, specifically administrators.
References