CVE-2020-24655

MEDIUM

5.1

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2020-09-10

Last Modified2024-11-21

Data SourcesNVD

Vulnerability Description

A race condition in the Twilio Authy 2-Factor Authentication application before 24.3.7 for Android allows a user to potentially approve/deny an access request prior to unlocking the application with a PIN on older Android devices (effectively bypassing the PIN requirement).

Affected Platforms (CPE)

📦

Twilio

Authy 2 Factor Authentication

= 24.3.7

References & Advisories

🔗 https://www.twilio.com/changelog

相关漏洞威胁

CVE-2026-148566.3

A stored Cross-Site Scripting (XSS) vulnerability in the file upload functionality of the Media Manager in TastyIgniter v4.3.0, ca...

CVE-2026-658948.7

This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could ex...

CVE-2026-9830

The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, lea...

CVE-2026-664127.1

Leantime 3.6.2 and prior contains a broken access control vulnerability that allows authenticated users to read milestone data fro...