Twenty 0.3.0
Approved changes feed: RSS · Atom
cpe:2.3:a:twenty:twenty:0.3.0:*:*:*:*:*:*:*part: a version: 0.3.0 update: *
| Vendor | Twenty (0723f940-3f69-534c-9d18-7f2e89f8db9e) |
|---|---|
| Product | Twenty (48429ed9-1600-5c8d-9658-11bd68dcf894) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wordpress/twentytwenty |
purl2cpe | 2026-06-01 10:14:41.675679 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-28435 |
vulnerable | 2026-06-08 06:33:27.000146 |
Details available
The CRM platform Twenty version 0.3.0 is vulnerable to SSRF via file upload.
Published: 2024-03-25T00:00:00.000Z
Updated: 2024-08-26T15:18:14.207Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28434 |
vulnerable | 2026-06-08 06:33:26.998679 |
Details available
The CRM platform Twenty is vulnerable to stored cross site scripting via file upload in version 0.3.0. A crafted svg file can trigger the execution of the javascript code.
Published: 2024-03-25T00:00:00.000Z
Updated: 2024-08-28T20:17:26.631Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.