Beveiligingsadvies

CVE-2026-59713

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-06 20:36:24

Laatst bijgewerkt 2026-07-20 17:46:03

Toegewezen door VulnCheck

CVSS-score 8.6

Status PUBLISHED

Beschrijving

Leantime contains an OIDC login CSRF vulnerability in the verifyState() method that unconditionally returns true without validating state parameters. Attackers can craft malicious callback URLs with attacker-controlled authorization codes to perform session fixation, logging victims in as the attacker.

← Alle CVE's bekijken Bekijk op cve.org ↗