repository icon
linagora / twake Project repository

Twake is a secure open source collaboration platform to improve organizational productivity.

Submit a report

FIRST INTERACTION

WITHIN1 DAY

REVIEW

WITHIN22 DAYS

FIX

WITHIN46 DAYS

The Bearer Token still can be used after user logout
uonghoangminhchau
pending
Sensitive Cookie Without Secure Flag
uonghoangminhchau
pending
Sensitive Cookie Without HttpOnly Flag
uonghoangminhchau
pending
jwt token manupulation leads to account takeover
bikesh-yadav
pending
No rate limit against brute force attack on login page
cyberneticsplus
pending
XSS via CodeViewer Markdown
movptr06
pending
Password reset link does not expire even after changing password
exmachinagpt
pending
XSS in Integration URL and other 5 places (Bypass of patch)
70rpedo
pending
Lack of brute force protection
jeffreygaor
Medium
•CVE-2023-2675
XSS Stored inside many user input links
xanhacks
pending
Weak and Hardcoded HMAC Secret Key
0xsu3ks
pending
No Protection Against Bruteforce Attacks on Login Page
0xsu3ks
High
•CVE-2023-1665
Open Redirect at signup page
domiee13
pending
Open URL Redirection in Signup
az0mb13
pending
SSRF when send message with XML
kevinkien
informative
Critical
Send any message to any to any private channel
kevinkien
High
XSS in Integration URL
rezaduty
Medium
•CVE-2023-0028
Use of GET Request Method With Sensitive Query Strings
0x7zed
pending