Vulnerabilities in Bubka

9 results

CVE-2024-52598HIGH2FAuth vulnerable to Server Side Request Forgery + URI validation bypass in 2fauth /api/v1/twofaccounts/previewEPSS 0.6%CVE-2026-32133HIGH2FAuth has Blind SSRF in image parameter allows internal network access and moreEPSS 0.6%CVE-2023-36816MEDIUMCross-Site Scripting (XSS) at Account creation in 2FAuthEPSS 0.5%CVE-2024-52597MEDIUM2FAuth vulnerable to stored cross-site scripting via SVG upload and direct access renderEPSS 0.4%CVE-2026-63441MEDIUM2FAuth: SSRF guard misses IPv6 NAT64 prefixes, allowing image fetch to reach internal/metadata targetsEPSS —CVE-2026-63439CRITICAL2FAuth: Reverse Proxy Guard Trusts Client-Supplied Headers Without Proxy VerificationEPSS —CVE-2026-63440MEDIUM2FAuth: Authenticated SSRF via DNS rebinding in the otpauth image= icon fetch (validate-then-fetch TOCTOU)EPSS —CVE-2026-63438CRITICAL2FAuth: Reverse Proxy Guard Auto-Creates Users With Admin Promotion From Unauthenticated Header ValueEPSS —CVE-2026-63437MEDIUM2FAuth: Missing Authorization on Share Recipients Endpoint Allows Cross-User Account EnumerationEPSS —