Filtered by vendor Twenty Subscriptions
Total 5 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-35451 1 Twenty 1 Twenty 2026-04-23 5.7 Medium
Twenty is an open source CRM. Prior to 1.20.6, a Stored Cross-Site Scripting (XSS) vulnerability exists in the BlockNote editor component. Due to a lack of protocol validation in the FileBlock component and insufficient server-side inspection of block content, an attacker can inject a javascript: URI into the url property of a file block. This allows the execution of arbitrary JavaScript when a user clicks on the malicious file attachment. This vulnerability is fixed in 1.20.6.
CVE-2026-27023 1 Twenty 1 Twenty 2026-04-18 5 Medium
Twenty is an open source CRM. Prior to version 1.18, the SSRF protection in SecureHttpClientService validated request URLs at the request level but did not validate redirect targets. An authenticated user who could control outbound request URLs (e.g., webhook endpoints, image URLs) could bypass private IP blocking by redirecting through an attacker-controlled server. This issue has been patched in version 1.18.
CVE-2026-26720 1 Twenty 2 Crm, Twenty 2026-04-17 9.8 Critical
An issue in Twenty CRM v1.15.0 and before allows a remote attacker to execute arbitrary code via the local.driver.ts module.
CVE-2024-28434 1 Twenty 1 Twenty 2025-09-18 7.6 High
The CRM platform Twenty is vulnerable to stored cross site scripting via file upload in version 0.3.0. A crafted svg file can trigger the execution of the javascript code.
CVE-2024-28435 1 Twenty 1 Twenty 2025-09-18 5.4 Medium
The CRM platform Twenty version 0.3.0 is vulnerable to SSRF via file upload.