CVE-2025-70038

HIGH

Linagora Twake 2023.Q1.1223 - XSS

Title source: llm

Description

An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in linagora Twake v2023.Q1.1223. This allows attackers to execute arbitrary code.

References (3)

Scores

CVSS v3 8.8
EPSS 0.0007
EPSS Percentile 21.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-79
Status published
Products (1)
linagora/twake 2023.q1.1223
Published Mar 09, 2026
Tracked Since Mar 10, 2026