Vulnerabilities (CVE)

Filtered by vendor Linagora Subscribe
Filtered by product Twake
Total 6 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-70037 1 Linagora 1 Twake 2026-03-13 N/A 6.1 MEDIUM
An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in linagora Twake v2023.Q1.1223. This allows attackers to obtain sensitive information and execute arbitrary code.
CVE-2025-70038 1 Linagora 1 Twake 2026-03-13 N/A 8.8 HIGH
An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in linagora Twake v2023.Q1.1223. This allows attackers to execute arbitrary code.
CVE-2025-70039 1 Linagora 1 Twake 2026-03-13 N/A 9.8 CRITICAL
An issue pertaining to CWE-78: Improper Neutralization of Special Elements used in an OS Command was discovered in linagora Twake v2023.Q1.1223.
CVE-2023-2675 1 Linagora 1 Twake 2024-11-21 N/A 9.8 CRITICAL
Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 2023.Q1.1223.
CVE-2023-1665 1 Linagora 1 Twake 2024-11-21 N/A 9.8 CRITICAL
Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0.
CVE-2023-0028 1 Linagora 1 Twake 2024-11-21 N/A 5.7 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository linagora/twake prior to 2023.Q1.1200+.