CVE-2024-27474

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Leantime 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF). This vulnerability allows malicious actors to perform unauthorized actions on behalf of authenticated users, specifically administrators.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-352

Affected software

Vendor	Product	Versions
n/a	n/a	n/a
leantime	leantime	3.0.6

References

https://drive.proton.me/urls/67VER05Z84#f0fXnmp8o6Y9Broken Link
https://github.com/Leantime/leantime/blob/264a7dbc2c9b18f574821bf27dd568a287ee8498/app/Domain/Users/Controllers/NewUser.php#L16Product
https://github.com/dead1nfluence/Leantime-POC/blob/main/README.mdExploit, Third Party Advisory
https://drive.proton.me/urls/67VER05Z84#f0fXnmp8o6Y9Broken Link
https://github.com/Leantime/leantime/blob/264a7dbc2c9b18f574821bf27dd568a287ee8498/app/Domain/Users/Controllers/NewUser.php#L16Product
https://github.com/dead1nfluence/Leantime-POC/blob/main/README.mdExploit, Third Party Advisory

Timeline

Published: Apr 10, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-274764.7Leantime 3.0.6 is vulnerable to HTML Injection via /dashboard/show#/tickets/newTicket.CVE-2024-274776.1In Leantime 3.0.6, a Cross-Site Scripting vulnerability exists within the ticket creation and modification functionality, allowing attackers CVE-2024-27484.3A Cross Site Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed an attacker to execute unauthorized actio CVE-2024-274809.8givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload.CVE-2024-274889.8Incorrect Access Control vulnerability in ZLMediaKit versions 1.0 through 8.0, allows remote attackers to escalate privileges and obtain sen CVE-2024-274897.5An issue in the DelFile() function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request.CVE-2024-27495.9The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8's access control mechanism fails to properly restrict access to its CVE-2024-274978.8Linksys E2000 Ver.1.0.06 build 1 is vulnerable to authentication bypass via the position.js file.CVE-2024-274996.5Bagisto v1.5.1 is vulnerable for Cross site scripting(XSS) via png file upload vulnerability in product review option.CVE-2024-27505.4The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL attribute of the Button wid CVE-2024-275077.5libLAS 1.8.1 contains a memory leak vulnerability in /libLAS/apps/ts2las.cpp.CVE-2024-275087.5Atheme 7.2.12 contains a memory leak vulnerability in /atheme/src/crypto-benchmark/main.c.