CVE-2024-39891 Twilio Authy
Twilio Authy contains an information disclosure vulnerability in its API that allows an unauthenticated endpoint to accept a request containing a phone number and respond with information about whether the phone number was registered with Authy.
- CVSS
- not scored
On CISA’s exploited list
Twilio Authy Information Disclosure Vulnerability
- Added
- 2024-07-23
- Federal patch deadline
- 2024-08-13
- Ransomware use
- not known