Security Advisory
CVE-2024-27705
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Cross Site Scripting vulnerability in Leantime v3.0.6 allows attackers to execute arbitrary code via upload of crafted PDF file to the files/browse endpoint.