Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-28434
7.6
HIGHCVSS v3
Published
March 25, 2024
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
The CRM platform Twenty is vulnerable to stored cross site scripting via file upload in version 0.3.0. A crafted svg file can trigger the execution of the javascript code.
GitHub