Leantime JSON-RPC users.getUser Full Credential Dump Vulnerability (CVE-639522)

github.com 2026-07-07查看中文 →

Security AdvisoryCVE-2023-639522CriticalLeantime

Affected:

Leantime 3.4.4

Fixed in:

v3.9.6

Referenced CVEs: CVE-2026-59712 · 8.1

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Security Fixes for Jovancoding/Network-AI: Symlink Escape, Path Traversal, Unauth Access 2026-07-21 Heap-based Buffer Overflow in xrdp vnc-any mode (CVE-2026-4252) Advisory 2026-07-21 network-ai EnvironmentManager.backup() Symlink Traversal Local File Disclosure 2026-07-21 AgentRuntime Sandbox Path Prefix Check Bypass Allows File Access Outside Base Directory 2026-07-21 v5.12.2 Patch Fixes 5 CVEs: Path Traversal, Symlink Escape, Unauth N/A 2026-07-21

Offline Archive

Offline screenshot & PDF are Pro-exclusive