{ "id": "CVE-2024-28435", "sourceIdentifier": "cve@mitre.org", "published": "2024-03-25T14:15:09.767", "lastModified": "2024-03-25T14:15:09.767", "vulnStatus": "Received", "descriptions": [ { "lang": "en", "value": "The CRM platform Twenty version 0.3.0 is vulnerable to SSRF via file upload." } ], "metrics": {}, "references": [ { "url": "https://github.com/b-hermes/vulnerability-research/tree/main/CVE-2024-28435", "source": "cve@mitre.org" }, { "url": "https://github.com/twentyhq/twenty", "source": "cve@mitre.org" } ] }