CVE-2024-34453

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-34453
TwoNav 2.1.13 contains an SSRF vulnerability via the url paramater to index.php?c=api&method=read_data&type=connectivity_test (which reaches /system/api.php).

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/tznb1/TwoNav/compare/v2.1.13-20240321...v2.1.14-20240419
https://github.com/tznb1/TwoNav/issues/9#issuecomment-2022194939
https://github.com/tznb1/TwoNav/compare/v2.1.13-20240321...v2.1.14-20240419
https://github.com/tznb1/TwoNav/issues/9#issuecomment-2022194939
Configurations

No configuration.

History

21 Nov 2024, 09:18

Type Values Removed Values Added
References () https://github.com/tznb1/TwoNav/compare/v2.1.13-20240321...v2.1.14-20240419 - () https://github.com/tznb1/TwoNav/compare/v2.1.13-20240321...v2.1.14-20240419 -
References () https://github.com/tznb1/TwoNav/issues/9#issuecomment-2022194939 - () https://github.com/tznb1/TwoNav/issues/9#issuecomment-2022194939 -

03 Jul 2024, 02:00

Type Values Removed Values Added
CWE CWE-918
Summary
  • (es) TwoNav 2.1.13 contiene una vulnerabilidad SSRF a través del parámetro de URL index.php?c=api&method=read_data&type=connectivity_test (que llega a /system/api.php).
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.3

03 May 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-03 18:15

Updated : 2024-11-21 09:18

NVD link : CVE-2024-34453

Mitre link : CVE-2024-34453

CVE.ORG link : CVE-2024-34453

JSON object : View

Products Affected

No product.

CWE
CWE-918

Server-Side Request Forgery (SSRF)