CVE-2026-59713
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
Leantime has an OIDC login CSRF vulnerability in the verifyState() method that unconditionally returns true without validating state parameters. Attackers can craft malicious callback URLs with attacker-controlled authorization codes to perform session fixation, logging victims in as the attacker.
Risk Assessment
The risk is that an attacker can hijack a user's session, leading to unauthorized access to data and system functions in the victim's context.
Recommendation
Immediately update Leantime to a version that fixes the state parameter validation in the verifyState() method and implement CSRF protection mechanisms in the OIDC login process.
Original NVD description (English source)
Leantime contains an OIDC login CSRF vulnerability in the verifyState() method that unconditionally returns true without validating state parameters. Attackers can craft malicious callback URLs with attacker-controlled authorization codes to perform session fixation, logging victims in as the attacker.