277 matches found
Weak Password Requirements
modoboa has Weak Password Requirements. The vulnerability exists in the clean function of forms.py due to lack of check conditions which allows an attacker to set unsafe passwords and bypass the password requirements...
modoboa cross-site request forgery vulnerability (CNVD-2023-32765)
modoboa is an email hosting and management platform for individual developers. A cross-site request forgery vulnerability exists in modoboa versions prior to 2.1.0, which stems from /admin/accounts/id/edit/?activetab=default does not adequately validate that the request is from a trusted user. An...
Modoboa Information Disclosure Vulnerability
modoboa is an email hosting and management platform for individual developers. An information disclosure vulnerability exists in modoboa versions prior to 2.1.0, which originates when /api/v2/parameters/core/ returns sensitive information without any authentication or authorization. An attacker c...
modoboa-automua (=1.0.0) potentially affected by CVE-2023-2228 via modoboa (=1.17.0)
modoboa PYPI version =1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua =1.0.0 Source cves: CVE-2023-2228 Source advisory: OSV:GHSA-6PVF-CQ4F-HFJP...
GHSA-6PVF-CQ4F-HFJP modoboa vulnerable to Cross-Site Request Forgery
modoboa prior to 2.1.0 is vulnerable to cross-site request forgery. An attacker must be logged in as admin to exploit this issue...
modoboa-automua (=1.0.0) potentially affected by CVE-2023-2227 via modoboa (=1.17.0)
modoboa PYPI version =1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua =1.0.0 Source cves: CVE-2023-2227 Source advisory: OSV:GHSA-67MG-GM8M-PH5R...
GHSA-67MG-GM8M-PH5R Improper Authorization in modoboa
In modoboa prior to 2.1.0, sending a GET request to the endpoint /api/v2/parameters/core/ returns sensitive information without any authentication or authorization...
modoboa vulnerable to Cross-Site Request Forgery
modoboa prior to 2.1.0 is vulnerable to cross-site request forgery. An attacker must be logged in as admin to exploit this issue...
Improper Authorization in modoboa
In modoboa prior to 2.1.0, sending a GET request to the endpoint /api/v2/parameters/core/ returns sensitive information without any authentication or authorization...
CVE-2023-2227
Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0...
CVE-2023-2228
Cross-Site Request Forgery CSRF in GitHub repository modoboa/modoboa prior to 2.1.0...
Authorization
Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0...
PYSEC-2023-35
Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0...
modoboa-automua (=1.0.0) potentially affected by CVE-2023-2228 via modoboa (=1.17.0)
modoboa PYPI version =1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua =1.0.0 Source cves: CVE-2023-2228 Source advisory: OSV:PYSEC-2023-36...
PYSEC-2023-36
Cross-Site Request Forgery CSRF in GitHub repository modoboa/modoboa prior to 2.1.0...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF in GitHub repository modoboa/modoboa prior to 2.1.0...
modoboa-automua (=1.0.0) potentially affected by CVE-2023-2227 via modoboa (=1.17.0)
modoboa PYPI version =1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua =1.0.0 Source cves: CVE-2023-2227 Source advisory: OSV:PYSEC-2023-35...
PYSEC-2023-36
Cross-Site Request Forgery CSRF in GitHub repository modoboa/modoboa prior to 2.1.0...