Lucene search

@huntrdevCVE-2023-2675

HistoryNov 07, 2023 - 4:13 a.m.

CVE-2023-2675

2023-11-0704:13:06

CWE-307

@huntrdev

web.nvd.nist.gov

cve-2023-2675

improper restriction

authentication attempts

github

linagora

twake

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.5

Confidence

High

EPSS

0.002

Percentile

55.3%

JSON

Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 2023.Q1.1223.

Affected configurations

Nvd

Node

linagoratwakeRange<2023.q1.1223

VendorProductVersionCPE
linagoratwake*cpe:2.3:a:linagora:twake:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linagora	twake	*	cpe:2.3:a:linagora:twake::::::::

CNA Affected

[
  {
    "vendor": "linagora",
    "product": "linagora/twake",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "2023.Q1.1223",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/linagora/twake/commit/0770da3b184b5d5e71fee8251a5847a04c7cb9bc

huntr.dev/bounties/474d3b39-1882-4d2c-b8f7-ff9f68f14cee

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.5

Confidence

High

EPSS

0.002

Percentile

55.3%

JSON

Related for CVE-2023-2675