What’s Vulnerable › Vulnerabilities

CVE-2023-2675: Improper Restriction of Excessive Authentication Attempts in linagora/twake

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-11-07 · updated 2026-06-17
• Weakness: CWE-307

Description

Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 2023.Q1.1223.

Affected products

• linagora/twake: before 2023.q1.1223 — fixed in 2023.q1.1223

How to fix

Upgrade to a fixed version: linagora/twake 2023.q1.1223. Check the vendor advisory for mitigations.

References

• https://github.com/linagora/twake/commit/0770da3b184b5d5e71fee8251a5847a04c7cb9bc
• https://huntr.dev/bounties/474d3b39-1882-4d2c-b8f7-ff9f68f14cee
• https://github.com/linagora/twake/commit/0770da3b184b5d5e71fee8251a5847a04c7cb9bc
• https://huntr.dev/bounties/474d3b39-1882-4d2c-b8f7-ff9f68f14cee

Get alerted when CVE-2023-2675 or the next vulnerability affects your stack