← All credits

Javokhir Tursunboyev (@javokhir-sec)

4 vulnerability records and advisories credit this contributor.

Leantime CSRF Protection Globally Disabled by Omission of Laravel VerifyCsrfToken Middleware

Leantime Server-Side Request Forgery and Local File Inclusion in Blueprints::import()

Leantime Open Redirect in Login Controller via redirectUrl Parameter

Leantime all versions prior to and 3.6.2 Broken Access Control via tickets.getMilestone JSON-RPC