CVE-2024-27474: CSRF
Published Apr 10, 2024
·Updated
Leantime 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF). This vulnerability allows malicious actors to perform unauthorized actions on behalf of authenticated users, specifically administrators.
Affected Software
2 affected components
Leantime Leantime
Leantime Leantime=3.0.6
Event History
Apr 10, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-27474?
CVE-2024-27474 is classified as a critical vulnerability due to its potential to allow unauthorized actions by malicious actors.
2
How do I fix CVE-2024-27474?
To fix CVE-2024-27474, update Leantime to a patched version that addresses the CSRF vulnerability.
3
Who is affected by CVE-2024-27474?
CVE-2024-27474 affects users of Leantime 3.0.6, particularly those with administrator privileges.
4
What type of vulnerability is CVE-2024-27474?
CVE-2024-27474 is a Cross Site Request Forgery (CSRF) vulnerability.
5
What actions can be exploited due to CVE-2024-27474?
CVE-2024-27474 allows attackers to perform unauthorized actions on behalf of authenticated users, including administrators.