agentprime: leantimeEvery new CVE for leantime.https://agentprime.io/CVE-2026-92772: Leantime before 3.9.6 Unauthorized Plugin Installation via HTMXhttps://agentprime.io/advisories/CVE-2026-92772/https://agentprime.io/advisories/CVE-2026-92772/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 20:32:33 GMTCVECVE-2026-54418: Leantime - Missing Authorization on TwoFA JSON-RPC Methods Allows Cross-Account 2FA Secret Disclosure and Bypasshttps://agentprime.io/advisories/CVE-2026-54418/https://agentprime.io/advisories/CVE-2026-54418/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 06:58:34 GMTCVECVE-2026-66416: Leantime CSRF Protection Globally Disabled by Omission of Laravel VerifyCsrfToken Middlewarehttps://agentprime.io/advisories/CVE-2026-66416/https://agentprime.io/advisories/CVE-2026-66416/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 17:00:10 GMTCVECVE-2026-66415: Leantime Server-Side Request Forgery and Local File Inclusion in Blueprints::import()https://agentprime.io/advisories/CVE-2026-66415/https://agentprime.io/advisories/CVE-2026-66415/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 16:49:54 GMTCVECVE-2026-66414: Leantime Open Redirect in Login Controller via redirectUrl Parameterhttps://agentprime.io/advisories/CVE-2026-66414/https://agentprime.io/advisories/CVE-2026-66414/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 16:36:21 GMTCVECVE-2026-66412: Leantime all versions prior to and 3.6.2 Broken Access Control via tickets.getMilestone JSON-RPChttps://agentprime.io/advisories/CVE-2026-66412/https://agentprime.io/advisories/CVE-2026-66412/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jul 2026 05:23:20 GMTCVECVE-2026-15510: Leantime API saveSetting improper authorizationhttps://agentprime.io/advisories/CVE-2026-15510/https://agentprime.io/advisories/CVE-2026-15510/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 12 Jul 2026 22:45:10 GMTCVECVE-2026-15509: Leantime JSON-RPC Endpoint addUser improper authorizationhttps://agentprime.io/advisories/CVE-2026-15509/https://agentprime.io/advisories/CVE-2026-15509/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 12 Jul 2026 22:30:09 GMTCVECVE-2026-59712: Leantime - JSON-RPC API Broken Access Control via users.getUserhttps://agentprime.io/advisories/CVE-2026-59712/https://agentprime.io/advisories/CVE-2026-59712/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Jul 2026 20:43:50 GMTCVECVE-2026-59713: Leantime - OIDC Login CSRF via Unconditional State Verification Stubhttps://agentprime.io/advisories/CVE-2026-59713/https://agentprime.io/advisories/CVE-2026-59713/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Jul 2026 20:36:24 GMTCVECVE-2023-45826: Authenticated SQL Injection in leantimehttps://agentprime.io/advisories/CVE-2023-45826/https://agentprime.io/advisories/CVE-2023-45826/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Oct 2023 18:28:54 GMTCVECVE-2023-33961: Leantime Stored Cross-site Scripting Vulnerabilityhttps://agentprime.io/advisories/CVE-2023-33961/https://agentprime.io/advisories/CVE-2023-33961/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 May 2023 21:34:00 GMTCVECVE-2020-5292: Time-based blind injection in Leantimehttps://agentprime.io/advisories/CVE-2020-5292/https://agentprime.io/advisories/CVE-2020-5292/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Mar 2020 18:15:15 GMTCVE