Leanote

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Leanote records in CISA KEV

No Leanote vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Desktop · all components

TI-2017-14701 CVE-2017-1000492 · GHSA-x924-v85r-46p5

LOW 29

Leanote-desktop version v2.5 is vulnerable to a XSS which leads to code execution due to enabled node integration

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01044 Published 2018-01-03 No fix listed CWE-79

TI-2024-00784 CVE-2024-0849 · GHSA-rpw7-c5cp-v8vp

LOW 24

Leanote version 2.7.0 allows obtaining arbitrary local files.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00234 Published 2024-02-07 No fix listed CWE-22