Threats tagged 'ghsa-hphp-fmhr-5fqh'

CVE-2026-59712 is a vulnerability in Leantime's JSON-RPC API where the Users::getUser method lacks proper authorization checks. Authenticated users can exploit this flaw to retrieve full user credential data, including password hashes, TOTP secrets, and session tokens, by querying arbitrary user IDs. This enables attackers to enumerate all user accounts and potentially perform offline password cracking, two-factor authentication bypass, and session hijacking.