Linagora Twake
6 CVEs affecting Linagora Twake. Latest disclosed: 2026-03-09. Critical: 3, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-70039 | Critical | 9.8 | 2026-03-09 | An issue pertaining to CWE-78: Improper Neutralization of Special Elements used in an OS Command was discovered in linagora Twake v2023.Q1.1223. |
CVE-2023-2675 | Critical | 9.8 | 2023-11-07 | Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 2023.Q1.1223. |
CVE-2023-1665 | Critical | 9.8 | 2023-03-27 | Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0. |
CVE-2025-70038 | High | 8.8 | 2026-03-09 | An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in linagora Twake v2023.Q1.1223. This allows attacker… |
CVE-2025-70037 | Medium | 6.1 | 2026-03-09 | An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in linagora Twake v2023.Q1.1223. This allows attackers to obtain sensitive inf… |
CVE-2023-0028 | Medium | 5.7 | 2023-01-01 | Cross-site Scripting (XSS) - Stored in GitHub repository linagora/twake prior to 2023.Q1.1200+. |