Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in linagora Twake v2023.Q1.1223. This allows attackers to execute arbitrary code.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-09 | 2 | Disclosure1General1 |
| 2026-03-10 | 1 | Disclosure1 |
CVE-2025-70038 Cross-Site Scripting (XSS) Vulnerability in Linagora Twake v2023.Q1.1223 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-70038
Post summary
The post announces a new Cross‑Site Scripting vulnerability (CVE‑2025‑70038) in Linagora Twake v2023.Q1.1223, providing only basic technical details and a link to a vulnerability database, without any PoC, exploitation or patch information.
CVE-2025-70038 An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in linagora Twake v2023.Q1.1223. This allows attackers to ex… https://www.cve.org/CVERecord?id=CVE-2025-70038
Post summary
The message announces the discovery of CVE‑2025‑70038, a CWE‑79 XSS vulnerability affecting linagora Twake v2023.Q1.1223, without providing proof‑of‑concept, exploit code, or mitigation details.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2025-70038 - Linagora Twake Cross-Site Scripting (XSS) Intel Report: https://ift.tt/nhXYN04
Post summary
The tweet is an alert on CVE-2025-70038, noting a Linagora Twake Cross‑Site Scripting vulnerability. No proof‑of‑concept, exploit, or patch details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | linagora | twake | 2023.q1.1223 | - | - |