Twilio

Records2All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Twilio records in CISA KEV

TI-2024-26788 Twilio Authy Information Disclosure Vulnerability HIGH 81KEV 2024-07-23

Components

Products in the NVD configurations · select one to filter the records

Authy 1 record HIGH Authy 2-factor Authentication 1 record LOW Authy Authenticator 1 record HIGH

Records

2 records

TI-2024-26788 CVE-2024-39891 · GHSA-vg5j-h7r8-88x8

In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before…

HIGH 81KEV

In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to certain phone-number data, as exploited in the wild in June 2024.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01669 Published 2024-07-02 No fix listed CWE-203

TI-2020-15123 CVE-2020-24655 · GHSA-85p3-g932-hx25

A race condition in the Twilio Authy 2-Factor Authentication application before 24.3.7…

LOW 23

A race condition in the Twilio Authy 2-Factor Authentication application before 24.3.7 for Android allows a user to potentially approve/deny an access request prior to unlocking the application with a PIN on older Androi…

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.00225 Published 2020-09-10 No fix listed CWE-362

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0