Twake

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-70039 CRITICAL Act Now

OS command injection in Linagora Twake v2023.Q1.1223 allows unauthenticated remote code execution.

Command Injection Twake

NVD GitHub

CVSS 3.1

9.8

EPSS

0.0%

CVE-2025-70038 HIGH This Week

An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in linagora Twake v2023.Q1.1223. This allows attackers to execute arbitrary code. [CVSS 8.8 HIGH]

RCE XSS Twake

NVD GitHub

CVSS 3.1

8.8

EPSS

0.0%

CVE-2025-70037 MEDIUM This Month

An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in linagora Twake v2023.Q1.1223. This allows attackers to obtain sensitive information and execute arbitrary code. [CVSS 6.1 MEDIUM]

RCE Open Redirect Twake

NVD GitHub

CVSS 3.1

6.1

EPSS

0.0%

CVE-2025-70039

EPSS 0% CVSS 9.8

CRITICAL Act Now

OS command injection in Linagora Twake v2023.Q1.1223 allows unauthenticated remote code execution.

Command Injection Twake

NVD GitHub

CVE-2025-70038

EPSS 0% CVSS 8.8

HIGH This Week

RCE XSS Twake

NVD GitHub

CVE-2025-70037

EPSS 0% CVSS 6.1

MEDIUM This Month

RCE Open Redirect Twake

NVD GitHub