← All advisories

Medium severity5.7NVD Advisory· Published Jan 1, 2023· Updated Jun 17, 2026

CVE-2023-0028

CVE-2023-0028

Description

Cross-site Scripting (XSS) - Stored in GitHub repository linagora/twake prior to 2023.Q1.1200+.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Linaro/Twake2 versions
cpe:2.3:a:linagora:twake:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:linagora:twake:*:*:*:*:*:*:*:*range: <=2022.q4.1120
- (no CPE)range: <2023.Q1.1200+
GitHub/twakellm-fuzzy
Range: <2023.Q1.1200+
linagora/linagora/twakev5
Range: unspecified

Patches

Vulnerability mechanics

References

2

github.com/linagora/Twake/pull/2678/commits/c0708c397e199c68cea0db9f59d29d7dbdcdde7bnvdPatch
huntr.dev/bounties/bfd935f4-2d1d-4d3f-8b59-522abe7dd065nvdExploitPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.