← Back

Desktop

desktop

Vendor: Leanote • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-0849
1Leanote
1Desktop
Jun 17, 2026
Feb 7, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Leanote version 2.7.0 allows obtaining arbitrary local files. This is possible because the application is vulnerable to LFR.
CVE-2017-1000492
1Leanote
1Desktop
Nov 21, 2024
Jan 3, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Leanote-desktop version v2.5 is vulnerable to a XSS which leads to code execution due to enabled node integration