PT-2023-16520 · Modoboa · Modoboa

Name of the Vulnerable Software and Affected Versions: modoboa/modoboa versions prior to 2.0.4 Description: The issue is related to an Authentication Bypass by Primary Weakness. There is no information provided about the estimated number of potentially affected devices worldwide or real-world...

CVE-2023-0777

CVE-2023-0777 affects modoboa/modoboa up to version 2.0.4, enabling an unauthenticated admin takeover due to a primary weakness in authentication. The NVD entry lists a critical CVSS v3.1 score (9.8) with network access, no privileges, and full confidentiality/Integrity/Availability impact. Conne...

CVE-2023-0777 Authentication Bypass by Primary Weakness in modoboa/modoboa

Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4...

Cross-Site Scripting (XSS)

modoboa is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to a lack of santization in the name fields while creating accounts, which allows an attacker to inject and execute arbitrary JavaScript when viewing the logs and identities pages...

Modoboa Cross-Site Scripting Vulnerability

modoboa is an email hosting and management platform for individual developers. A cross-site scripting vulnerability exists in versions prior to modoboa 2.0.4. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

Cross-Site Scripting (XSS)

modoboa is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the user input before it outputs to the front end via the domain creation form, allowing an attacker to inject and execute malicious JavaScript on a victim's browser...

modoboa cross-site request forgery vulnerability

modoboa is an email hosting and management platform for individual developers. modoboa versions prior to 2.0.4 are vulnerable to cross-site request forgery. An attacker could exploit this vulnerability to perform cross-site request forgery CSRF attacks...

modoboa Cross-site Request Forgery Vulnerability (CNVD-2023-05396)

modoboa is an email hosting and management platform for individual developers. modoboa versions prior to 2.0.4 are vulnerable to cross-site request forgery. An attacker could exploit this vulnerability to perform cross-site request forgery CSRF attacks...

modoboa-automua (=1.0.0) potentially affected by CVE-2023-0470 via modoboa (=1.17.0)

modoboa PYPI version =1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua =1.0.0 Source cves: CVE-2023-0470 Source advisory: OSV:GHSA-C467-5C2G-JP86...

GHSA-JM3M-WR3P-HJRQ Cross-site Scripting in modoboa

Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...

modoboa-automua (=1.0.0) potentially affected by CVE-2023-0519 via modoboa (=1.17.0)

modoboa PYPI version =1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua =1.0.0 Source cves: CVE-2023-0519 Source advisory: OSV:GHSA-JM3M-WR3P-HJRQ...

Cross-site Scripting in modoboa

Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...

Cross-site Scripting in modoboa

Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...

GHSA-C467-5C2G-JP86 Cross-site Scripting in modoboa

Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...

CVE-2023-0519

Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...

modoboa-automua (=1.0.0) potentially affected by CVE-2023-0519 via modoboa (=1.17.0)

modoboa PYPI version =1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua =1.0.0 Source cves: CVE-2023-0519 Source advisory: OSV:PYSEC-2023-31...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...

PYSEC-2023-31

Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...

PYSEC-2023-31

Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...

CVE-2023-0470

Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...