Vulnerabilities

TI-2025-42998 CVE-2025-70039 · GHSA-64p5-v8hv-7mqj

An issue pertaining to CWE-78: Improper Neutralization of Special Elements used in an OS…

MEDIUM 49

An issue pertaining to CWE-78: Improper Neutralization of Special Elements used in an OS Command was discovered in linagora Twake v2023.Q1.1223.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00442 Published 2026-03-09 No fix listed CWE-78

TI-2025-42997 CVE-2025-70038 · GHSA-7m29-jpp5-gpcj

MEDIUM 40

An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in linagora Twake v2023.Q1.1223.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00408 Published 2026-03-09 No fix listed CWE-79

TI-2025-42996 CVE-2025-70037 · GHSA-57xr-mpcr-4m48

LOW 27

An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in linagora Twake v2023.Q1.1223.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00246 Published 2026-03-09 No fix listed CWE-601

TI-2023-02503 CVE-2023-2675 · GHSA-54j2-6mj5-q4w3

HIGH 75

Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 2023.Q1.1223.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00599 Published 2023-05-12 Fixed in 2023.Q1.1223 CWE-307

TI-2023-01562 CVE-2023-1665 · GHSA-5xxr-4rc4-62hg

HIGH 76

Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0062 Published 2023-03-27 Fixed in 0.0.0 CWE-307

TI-2023-00028 CVE-2023-0028 · GHSA-p38f-vh2f-mc7r

HIGH 67

Cross-site Scripting (XSS) - Stored in GitHub repository linagora/twake prior to 2023.Q1.1200+.

CVSS 3.1MEDIUM 5.7 Network High privileges User interaction EPSS 0.56018 Published 2023-01-01 Fixed in 2023.Q1.1200+ CWE-79