Improper Input Validation (CWE-20)
Leanote version 2.7.0 allows obtaining arbitrary local files. This is possible because the application is vulnerable to LFR.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD published the first details for CVE-2024-0849
Feedly found the first article mentioning CVE-2024-0849. See article
EPSS Score was set to: 0.05% (Percentile: 17.8%)