Description
Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 2023.Q1.1223.
References (2)
Core 2
Core References
Exploit, Issue Tracking, Patch, Third Party Advisory
https://huntr.dev/bounties/474d3b39-1882-4d2c-b8f7-ff9f68f14cee
Scores
CVSS v3
9.8
EPSS
0.0059
EPSS Percentile
43.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-307
Status
published
Products (1)
linagora/twake
< 2023.q1.1223
Published
Nov 07, 2023
Tracked Since
Feb 18, 2026