CVE-2024-0849

Publication date

2024-02-07 02:50:42

Family

Fluid Attacks

State

PUBLISHED

Description

Leanote version 2.7.0 allows obtaining arbitrary local files. This is possible because the application is vulnerable to LFR.