Threat intelligence / Vulnerability
CVE-2024-39891
Twilio Authy contains an information disclosure vulnerability in its API that allows an unauthenticated endpoint to accept a request containing a phone number and respond with information about whether the phone number was registered with Authy.
Vulnerability
TypeVulnerability
External ID—
First seen2024-07-23
Last seen2024-07-23
Confidence
—
Twilio Authy contains an information disclosure vulnerability in its API that allows an unauthenticated endpoint to accept a request containing a phone number and respond with information about whether the phone number was registered with Authy.
Labels
CISA KEV context
Vendor / productTwilio Authy
Added2024-07-23
Due date2024-08-13
2 recorded
Relationships
2 external