CVE-2025-29449

The open-source bookmark management program TwoNav version 2.1.18-20241105 is vulnerable to a Server-Side Request Forgery (SSRF) . The flaw exists in the link identification function , where mishandling of input allows a remote attacker to obtain sensitive information . No exploit details are pro...

CVE-2025-29450

An issue in twonav v.2.1.18-20241105 , an open-source bookmark management program, allows a remote attacker to obtain sensitive information via the site settings component . The vulnerability is caused by the mishandling of this specific component and is categorized as a Server-Side Request Forge...

CVE-2023-37657

TwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting (XSS) as CVE-2023-37657. The connected sources confirm the product/version affected and the XSS class, but do not provide a technical root cause or specific vulnerable component. No patch/version with fix is disclosed in the supplied d...