What’s Vulnerable › Vulnerabilities

CVE-2024-34453

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-03 · updated 2026-06-17
• Weakness: CWE-918

Description

TwoNav 2.1.13 contains an SSRF vulnerability via the url paramater to index.php?c=api&method=read_data&type=connectivity_test (which reaches /system/api.php).

Affected products

• Lm21 Twonav: 2.1.13-20240321

References

• https://github.com/tznb1/TwoNav/compare/v2.1.13-20240321...v2.1.14-20240419
• https://github.com/tznb1/TwoNav/issues/9#issuecomment-2022194939
• https://github.com/tznb1/TwoNav/compare/v2.1.13-20240321...v2.1.14-20240419
• https://github.com/tznb1/TwoNav/issues/9#issuecomment-2022194939

Get alerted when CVE-2024-34453 or the next vulnerability affects your stack