Vulnerabilities

TI-2025-21082 CVE-2025-29450 · GHSA-wpf2-5j53-3cxv

An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive…

MEDIUM 62

An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the site settings component.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00385 Published 2025-04-17 No fix listed CWE-918

TI-2025-21081 CVE-2025-29449 · GHSA-2ccc-6qjv-38cv

MEDIUM 62

An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the link identification function.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00385 Published 2025-04-17 No fix listed CWE-918

TI-2023-19209 CVE-2023-37657 · GHSA-cv52-4q4w-pcrc

MEDIUM 58

TwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00384 Published 2023-07-11 No fix listed CWE-79