TI-2026-24670 CVE-2026-32133
2FAuth has Blind SSRF in image parameter allows internal network access and more
Priority HIGH 73
2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes.
Vulnerabilities
5 records
TI-2025-28827 CVE-2025-45731 · GHSA-vqm9-87vr-9765
A group deletion race condition in 2FAuth v5.5.0 causes data inconsistencies and orphaned…
Priority MEDIUM 62
A group deletion race condition in 2FAuth v5.5.0 causes data inconsistencies and orphaned accounts when a group is deleted while other operations are pending.
TI-2024-35258 CVE-2024-52598
2FAuth vulnerable to Server Side Request Forgery + URI validation bypass in 2fauth /api/v1/twofaccounts/preview
Priority HIGH 72
2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes.
TI-2024-35257 CVE-2024-52597
2FAuth vulnerable to stored cross-site scripting via SVG upload and direct access render
Priority MEDIUM 60
2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes.
Priority MEDIUM 60
2FA is a Web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes.