Packagist/leantime/leantime: medium 5.4
Leantime has HTML injection through firstname and lastname fields
Action: Upgrade leantime/leantime to 3.3.0 or later.
composer require leantime/leantime:3.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.3.0 | - |
Fixed versions
| 3.3.0 |
Sources
- osv: GHSA-qrfh-cc86-vc8c
- https://github.com/Leantime/leantime/security/advisories/GHSA-qrfh-cc86-vc8c
- https://github.com/Leantime/leantime/commit/3f8b2c6346111694bb18cec558b27c22d3a2b9d1
- https://github.com/Leantime/leantime
published · modified · JSON