Created
March 9, 2026 05:50
-
-
Save zcxlighthouse/e0ebb66220ae3c61a24288eb78402c42 to your computer and use it in GitHub Desktop.
CVE-2025-70038
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| [CVE ID] | |
| CVE-2025-70038 | |
| [PRODUCT] | |
| Twake | |
| [VERSION] | |
| v2023.Q1.1223 | |
| [PROBLEM TYPE] | |
| Improper Neutralization of Input During Web Page Generation (CWE-79) | |
| [DESCRIPTION] | |
| An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in linagora Twake v2023.Q1.1223. This weakness allows attackers to inject malicious scripts into web pages, potentially leading to cross-site scripting (XSS) attacks and unauthorized access to user data. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment