Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
linagora records in CISA KEVNo linagora vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 76
Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0062 · Published 2023-03-27 · Fixed in 0.0.0 CWE-307
Priority HIGH 75
Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 2023.Q1.1223.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00591 · Published 2023-05-12 · Fixed in 2023.Q1.1223 CWE-307
Priority HIGH 67
Cross-site Scripting (XSS) - Stored in GitHub repository linagora/twake prior to 2023.Q1.1200+.
CVSS 3.1MEDIUM 5.7· Network · High privileges · User interaction · EPSS 0.56018 · Published 2023-01-01 · Fixed in 2023.Q1.1200+ CWE-79
Priority MEDIUM 49
An issue pertaining to CWE-78: Improper Neutralization of Special Elements used in an OS Command was discovered in linagora Twake v2023.Q1.1223.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00442 · Published 2026-03-09 · No fix listed CWE-78
Priority MEDIUM 40
An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in linagora Twake v2023.Q1.1223.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00408 · Published 2026-03-09 · No fix listed CWE-79
Priority LOW 27
An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in linagora Twake v2023.Q1.1223.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00246 · Published 2026-03-09 · No fix listed CWE-601
THREATIST.IORead the docs