Volerion logoVolerion
Volerion logoVolerion

Linagora Twake Arbitrary Code Execution Vulnerability

Vulnerability

A vulnerability allowing arbitrary code execution has been identified in Linagora Twake version 2023.Q1.1223. This issue arises from improper neutralization of input during web page generation, which could enable attackers to inject malicious scripts. Such an injection could lead to cross-site scripting (XSS) attacks and unauthorized access to user data.

Impact

Exploitation of this vulnerability could result in arbitrary code execution on the server where Twake is hosted.

Added: Mar 9, 2026, 6:19 PM
Updated: Mar 9, 2026, 6:19 PM

Vulnerability Rating

Custom Algorithm
spread
1.9
impact
10.0
exploitability
6.6
remediation
0.0
relevance
3.7
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.