{ "id": "CVE-2024-27705", "sourceIdentifier": "cve@mitre.org", "published": "2024-04-03T22:15:06.987", "lastModified": "2024-04-03T22:15:06.987", "vulnStatus": "Received", "descriptions": [ { "lang": "en", "value": "Cross Site Scripting vulnerability in Leantime v3.0.6 allows attackers to execute arbitrary code via upload of crafted PDF file to the files/browse endpoint." } ], "metrics": {}, "references": [ { "url": "https://github.com/b-hermes/vulnerability-research/tree/main/CVE-2024-27705", "source": "cve@mitre.org" } ] }