← All advisories

Medium severity6.1OSV Advisory· Published Jan 3, 2018· Updated Jun 17, 2026

CVE-2017-1000459

CVE-2017-1000459

Description

Leanote version <= 2.5 is vulnerable to XSS due to not sanitized input in markdown notes

Affected products

3

Leanote/LeanoteOSV3 versions
0.1, 0.2, 0.3, …+ 2 more
- (no CPE)range: 0.1, 0.2, 0.3, …
- cpe:2.3:a:leanote:leanote:*:*:*:*:*:*:*:*range: <=2.5
- (no CPE)range: <=2.5

Patches

Vulnerability mechanics

References

1

github.com/leanote/leanote/issues/676nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.