What’s Vulnerable › Vulnerabilities

CVE-2023-1665: Improper Restriction of Excessive Authentication Attempts in linagora/twake

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-03-27 · updated 2026-06-17
• Weakness: CWE-307

Description

Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0.

Affected products

• linagora/twake: before 2023-03-25 — fixed in 2023-03-25

How to fix

Upgrade to a fixed version: linagora/twake 2023-03-25. Check the vendor advisory for mitigations.

References

• https://github.com/linagora/twake/commit/599f397561a771251dfc7cafb8cecda5ab22b8b3
• https://huntr.dev/bounties/db8fcbab-6ef0-44ba-b5c6-3b0f17ca22a2
• https://github.com/linagora/twake/commit/599f397561a771251dfc7cafb8cecda5ab22b8b3
• https://huntr.dev/bounties/db8fcbab-6ef0-44ba-b5c6-3b0f17ca22a2

Get alerted when CVE-2023-1665 or the next vulnerability affects your stack