medium5.0
CVE-2024-0849
Leanote version 2.7.0 allows obtaining arbitrary local files.
Impact
Leanote version 2.7.0 allows obtaining arbitrary local files. This is possible because the application is vulnerable to LFR.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Leanote | Desktop | Version 2.7.0 |