Security
English
همهٔ محصولات

leantime/leantime

Composer · بسته
13 گزارش
اطلاع‌رسانی آسیب‌پذیری
دنبال‌کردن
گزارشمحصولاکوسیستمشدتوضعیت اصلاحآخرین تغییر
Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC MethodsCVE-2026-85990 · GHSA-54MM-6729-R5WP leantime/leantime Composer زیاد اصلاح گزارش شده
Leantime has HTML injection through firstname and lastname fieldsGHSA-QRFH-CC86-VC8C leantime/leantime Composer متوسط اصلاح گزارش شده
Leantime affected by Improper Neutralization of HTML TagsCVE-2025-28254 · GHSA-95J3-435G-VJCP leantime/leantime Composer متوسط اصلاح گزارش شده
Leantime allows Cross-Site Scripting (XSS)GHSA-F679-254H-QHVJ leantime/leantime Composer کم اصلاح گزارش شده
Leantime has Missing Authorization Check for Host ParameterGHSA-3HFJ-QCVJ-4HX8 leantime/leantime Composer کم اصلاح گزارش شده
Leantime allows Stored Cross-Site Scripting (XSS)GHSA-C39W-3PJX-QC7M leantime/leantime Composer زیاد اصلاح گزارش شده
Leantime allows Cross Site Scripting (XSS) and SQL Injection (SQLi)GHSA-V4Q9-437P-MHPG leantime/leantime Composer زیاد اصلاح گزارش شده
Leantime allows Cross-Site Request Forgery (CSRF)GHSA-92XH-6X7V-4RMQ leantime/leantime Composer متوسط اصلاح گزارش شده
Leantime has Host Header Injection Vulnerability GHSA-99R5-84GR-59F6 leantime/leantime Composer متوسط اصلاح گزارش شده
Leantime allows Stored Cross-Site Scripting (XSS)GHSA-63CR-XG3F-8JVR leantime/leantime Composer متوسط اصلاح اعلام نشده
Leantime allows Stored Cross-Site Scripting (XSS)GHSA-MG4C-884J-PCQ9 leantime/leantime Composer متوسط اصلاح گزارش شده
Leantime has Insufficiently Protected CredentialsGHSA-H6W8-27PH-C385 leantime/leantime Composer متوسط اصلاح گزارش شده
Leantime allows Refelected Cross-Site Scripting (XSS)GHSA-52XF-H226-PFGX leantime/leantime Composer متوسط اصلاح گزارش شده