303 matches found
CVE-2023-0949: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5...
CVE-2023-0949 Cross-site Scripting (XSS) - Reflected in modoboa/modoboa
Cross-site Scripting XSS - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5...
Authentication Bypass
modoboa is vulnerable to authentication bypass. The vulnerability exists due to lack of check conditions in the API throttling which allows an unauthorized user to perform brute-forcing attacks and gain access to the system...
Improper Restriction of Excessive Authentication Attempts in modoboa
Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4...
GHSA-Q9WW-GJPW-P9G6 Improper Restriction of Excessive Authentication Attempts in modoboa
Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4...
CVE-2023-0860
Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4...
Input validation
Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4...
modoboa 安全漏洞
modoboa is an email hosting and management platform for individual developers. A security vulnerability exists in versions prior to modoboa 2.0.4, which stems from improperly limiting excessive authentication attempts...
CVE-2023-0860 Improper Restriction of Excessive Authentication Attempts in modoboa/modoboa-installer
Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4...
PT-2023-16567
Name of the Vulnerable Software and Affected Versions modoboa/modoboa-installer versions prior to 2.0.4 Description The issue is related to improper restriction of excessive authentication attempts. This can potentially lead to exploitation. Recommendations For versions prior to 2.0.4, update to...
CVE-2023-0860 Improper Restriction of Excessive Authentication Attempts in modoboa/modoboa-installer
Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4...
CVE-2023-0860 Improper Restriction of Excessive Authentication Attempts in modoboa/modoboa-installer
Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4...
CVE-2023-0860
CVE-2023-0860 affects the GitHub repository modoboa/modoboa-installer, with the vulnerability present in versions prior to 2.0.4. The issue arises from an improper restriction of excessive authentication attempts, as documented across multiple sources. The CVSS indicates a High impact (availabili...
CVE-2023-0860: Improper Restriction of Excessive Authentication Attempts
Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4...
CVE-2023-0860
Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4...
No Protection Against Bruteforce Attacks on Login Page in
Description Modoboa does not restrict or limit unsuccessful login attempts allowing an attacker to brute force the password of a known user Proof of Concept Steps to Reproduce: Capture login request with BurpSuite Send to Intruder Replay the login request with a different password value utilizing...
The XSS playload injected in "Display Name" parameter in creating Contacts are vulnerable to Cross-Site Scripting (Stored/Persistent)
Description The XSS playload injected in "Display Name" parameter in creating Contacts are vulnerable to Cross-Site Scripting Stored/Persistent. Steps to Reproduce: 1. First is go to the user dashboard then contacts: https://demo.modoboa.org/contacts// 2. Then Add new contact, enter the payload...
GHSA-RFHW-FM4M-52J6 Authentication Bypass in modoboa
Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4...