Skip to content
Threat Feed
Subscribe

Tag

Leantime

1 brief RSS
high advisory

CVE-2026-59713: Leantime OIDC Login CSRF leading to Session Fixation

CVE-2026-59713 identifies a high-severity OIDC login Cross-Site Request Forgery (CSRF) vulnerability in Leantime's verifyState() method, allowing attackers to craft malicious callback URLs with attacker-controlled authorization codes to perform session fixation and log victims into an attacker's session.

Leantime csrf oidc session-fixation web-application vulnerability
3t 1c