CVE-2023-2228

Cross-Site Request Forgery CSRF in GitHub repository modoboa/modoboa prior to 2.1.0...

CVE-2023-2228

creationtimestamp| type| source ---|---|--- 2023-04-21 16:31:47+00:00| seen| https://t.me/cibsecurity/62599...

modoboa-automua (=1.0.0) potentially affected by CVE-2023-2228 via modoboa (=1.17.0)

modoboa PYPI version =1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua =1.0.0 Source cves: CVE-2023-2228 Source advisory: OSV:GHSA-6PVF-CQ4F-HFJP...

CVE-2023-2228

CVE-2023-2228 affects modoboa/modoboa prior to 2.1.0. The issue is a Cross-Site Request Forgery (CSRF) vulnerability in /admin/accounts/{id}/edit/?active_tab=default, stemming from insufficient request validation. Exploitation requires an authenticated admin user, potentially enabling changes to ...

CVE-2023-2228 Cross-Site Request Forgery (CSRF) in modoboa/modoboa

Cross-Site Request Forgery CSRF in GitHub repository modoboa/modoboa prior to 2.1.0...