Authy vulnerabilities
1 known vulnerability in Authy from Twilio. None are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
0high
1exploited
5.3average CVSS score
Latest first
- 5.3 Medium severity
Twilio Authy Information Disclosure Exploited
In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to certain phone-number data, as exploited in the wild in June 2024. Specifically, the endpoint accepted a stream of reque