277 matches found
CVE-2023-2160 Weak Password Requirements in modoboa/modoboa
Weak Password Requirements in GitHub repository modoboa/modoboa prior to 2.1.0...
PT-2023-18286 · Modoboa · Modoboa
Name of the Vulnerable Software and Affected Versions: modoboa/modoboa versions prior to 2.1.0 Description: The issue is related to weak password requirements in the modoboa/modoboa GitHub repository. Users can set unsafe passwords, such as 1 or HACK. This issue is fixed in version 2.1.0...
CVE-2023-2160
The CVE pertains to modoboa/modoboa with weak password requirements prior to version 2.1.0. Several connected sources confirm that users could set unsafe passwords (e.g., 1, HACK) due to weak password policy, and that this was fixed in commit 130257c96a2392ada795785a91178e656e27015c and is addres...
CVE-2023-2160 Weak Password Requirements in modoboa/modoboa
Weak Password Requirements in GitHub repository modoboa/modoboa prior to 2.1.0...
modoboa 2.0.4 Admin Takeover
/ Exploit Title: modoboa 2.0.4 - Admin TakeOver Description: Authentication Bypass by Primary Weakness Date: 02/10/2023 Software Link: https://github.com/modoboa/modoboa Version: modoboa/modoboa prior to 2.0.4 Tested on: Arch Linux Exploit Author: 7h3h4ckv157 CVE: CVE-2023-0777 / package main...
modoboa 2.0.4 - Admin TakeOver
/ Exploit Title: modoboa 2.0.4 - Admin TakeOver Description: Authentication Bypass by Primary Weakness Date: 02/10/2023 Software Link: https://github.com/modoboa/modoboa Version: modoboa/modoboa prior to 2.0.4 Tested on: Arch Linux Exploit Author: 7h3h4ckv157 CVE: CVE-2023-0777 / package main...
modoboa 2.0.4 - Admin Account Takeover Exploit
/ Exploit Title: modoboa 2.0.4 - Admin TakeOver Description: Authentication Bypass by Primary Weakness Software Link: https://github.com/modoboa/modoboa Version: modoboa/modoboa prior to 2.0.4 Tested on: Arch Linux Exploit Author: 7h3h4ckv157 CVE: CVE-2023-0777 / package main import "fmt"...
Cross-site Scripting (XSS)
modoboa is vulnerable to Cross-site Scripting XSS. The vulnerability exists in the maketag function in the Listing.prototype object of listing.js as it does not properly encode the html attribute, allowing an attacker to inject and execute malicious JavaScript into the browser...
modoboa-automua (=1.0.0) potentially affected by CVE-2023-0949 via modoboa (=1.17.0)
modoboa PYPI version =1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua =1.0.0 Source cves: CVE-2023-0949 Source advisory: OSV:GHSA-MGMM-CMHJ-2H5F...
GHSA-MGMM-CMHJ-2H5F modoboa Cross-site Scripting vulnerability
Cross-site Scripting XSS - Reflected in GitHub repository modoboa/modoboa prior to 2.0.45...
modoboa Cross-site Scripting vulnerability
Cross-site Scripting XSS - Reflected in GitHub repository modoboa/modoboa prior to 2.0.45...
CVE-2023-0949
Cross-site Scripting XSS - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5...
modoboa-automua (=1.0.0) potentially affected by CVE-2023-0949 via modoboa (=1.17.0)
modoboa PYPI version =1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua =1.0.0 Source cves: CVE-2023-0949 Source advisory: OSV:PYSEC-2023-33...
PYSEC-2023-33
Cross-site Scripting XSS - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5...
PYSEC-2023-33
Cross-site Scripting XSS - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5...
Cross site scripting
Cross-site Scripting XSS - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5...
PT-2023-16635 · Modoboa · Modoboa
Name of the Vulnerable Software and Affected Versions: modoboa/modoboa versions prior to 2.0.5 Description: The issue is related to Cross-site Scripting XSS - Reflected. This is a type of security vulnerability that occurs when an application includes user input in its output without proper...
CVE-2023-0949 Cross-site Scripting (XSS) - Reflected in modoboa/modoboa
Cross-site Scripting XSS - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5...