PoC Index

CVE-2024-27474

HIGH 8.8EPSS 0.7%

Leantime 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF). This vulnerability allows malicious actors to perform unauthorized actions on behalf of authenticated users, specifically administrators.

CVSS v3.1
8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.65% chance of exploitation in the next 30 days, 49th percentile
Published
2024-04-10
Updated
2024-08-21

Proof-of-concept exploits (1)

References

Related