Lucene search

@huntrdevCVE-2023-1665

HistoryMar 27, 2023 - 10:15 p.m.

CVE-2023-1665

2023-03-2722:15:21

CWE-307

@huntrdev

web.nvd.nist.gov

cve-2023-1665

github

linagora

twake

security vulnerability

authentication

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.002

Percentile

53.2%

JSON

Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0.

Affected configurations

Nvd

Node

linagoratwakeRange<2023-03-25

VendorProductVersionCPE
linagoratwake*cpe:2.3:a:linagora:twake:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linagora	twake	*	cpe:2.3:a:linagora:twake::::::::

CNA Affected

[
  {
    "vendor": "linagora",
    "product": "linagora/twake",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "0.0.0",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/linagora/twake/commit/599f397561a771251dfc7cafb8cecda5ab22b8b3

huntr.dev/bounties/db8fcbab-6ef0-44ba-b5c6-3b0f17ca22a2

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.002

Percentile

53.2%

JSON

Related for CVE-2023-1665