CVE-2024-28434
The CRM platform Twenty is vulnerable to stored cross site scripting via file upload in version 0.3.0. A crafted svg file can trigger the execution of...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
The CRM platform Twenty is vulnerable to stored cross site scripting via file upload in version 0.3.0. A crafted svg file can trigger the execution of the javascript code.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web github.com