CVE-2023-0028 Cross-site Scripting (XSS) - Stored in linagora/twake

Cross-site Scripting XSS - Stored in GitHub repository linagora/twake prior to 2023.Q1.1200+...

CVE-2023-0028 Cross-site Scripting (XSS) - Stored in linagora/twake

Cross-site Scripting XSS - Stored in GitHub repository linagora/twake prior to 2023.Q1.1200+...

CVE-2023-0028

The CVE-2023-0028 entry corresponds to a stored Cross-site Scripting (XSS) vulnerability in the linagora/twake repository, where injected scripts can execute when a user clicks an integration URL. Affected component: the integration URL handling in Twake prior to 2023.Q1.1200+. Root cause: unvali...