CVE-2024-0849

CVSS V2 None CVSS V3 None
Description
Leanote version 2.7.0 allows obtaining arbitrary local files. This is possible because the application is vulnerable to LFR.
Overview
  • CVE ID
  • CVE-2024-0849
  • Assigner
  • Fluid Attacks
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-02-07T02:50:42.355Z
  • Last Modified Date
  • 2024-02-07T02:50:42.355Z
Weakness Enumerations
CWE URL
CWE-20 http://cwe.mitre.org/data/definitions/20.html
References
Reference URL Reference Tags
https://github.com/leanote/desktop-app
https://fluidattacks.com/advisories/alesso
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2024-0849
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0849
History
Created Old Value New Value Data Type Notes
2024-06-26 09:45:42 Added to TrackCVE