Linagora Twake Command Injection Vulnerability

A command injection vulnerability has been identified in Linagora Twake version 2023.Q1.1223. This issue arises from improper neutralization of special elements used in operating system commands, allowing attackers to inject and execute arbitrary commands. Such exploitation could potentially lead to a complete compromise of the system.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the server where Twake is running, which could lead to a full system compromise.