CVE-2024-28435

Published March 25th, 2024

View on NVD ↗

CVSS v3

5.4

MEDIUM

CVSS v2

N/A

Affected

2

PROJECTS

Description

The CRM platform Twenty version 0.3.0 is vulnerable to SSRF via file upload.

b-hermes/vulnerability-research

Selected public vulnerability research, CVE writeups, SSRF/parser bypasses, and AppSec findings.

GitHub

twentyhq/twenty

The open alternative to Salesforce, designed for AI.

GitHub

49.8K