Linagora Twake URL Redirection Vulnerability Allowing Sensitive Information Disclosure and Arbitrary Code Execution

A URL redirection vulnerability has been identified in Linagora Twake version 2023.Q1.1223. This issue allows attackers to redirect users to untrusted websites, potentially leading to phishing attacks or the exposure of sensitive information. Additionally, the vulnerability could be exploited to execute arbitrary code.

Impact

Exploitation of this vulnerability could result in unauthorized redirection of users to malicious sites, with potential consequences such as phishing or data exposure, along with the execution of arbitrary code.