402 matches found
modoboa cross-site scripting vulnerability
modoboa is an email hosting and management platform for individual developers. A cross-site scripting vulnerability exists in versions prior to modoboa 2.0.5. An attacker can exploit this vulnerability to perform cross-site scripting attacks...
Authentication Bypass
modoboa is vulnerable to authentication bypass. The vulnerability exists due to lack of check conditions in the API throttling which allows an unauthorized user to perform brute-forcing attacks and gain access to the system...
GHSA-Q9WW-GJPW-P9G6 Improper Restriction of Excessive Authentication Attempts in modoboa
Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4...
modoboa-automua (1.0.0) potentially affected by CVE-2023-0860 via modoboa (1.17.0)
modoboa PYPI version 1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua 1.0.0 Source cves: CVE-2023-0860 Source advisory: OSV:GHSA-Q9WW-GJPW-P9G6...
Improper Restriction of Excessive Authentication Attempts in modoboa
Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4...
CVE-2023-0860
Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4...
Input validation
Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4...
CVE-2023-0860 Improper Restriction of Excessive Authentication Attempts in modoboa/modoboa-installer
Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4...
CVE-2023-0860: Improper Restriction of Excessive Authentication Attempts
Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4...
modoboa-automua (1.0.0) potentially affected by CVE-2023-0860 via modoboa (1.17.0)
modoboa PYPI version 1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua 1.0.0 Source cves: CVE-2023-0860 Source advisory: MEND:CVE-2023-0860...
CVE-2023-0860 Improper Restriction of Excessive Authentication Attempts in modoboa/modoboa-installer
Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4...
PT-2023-16567
Name of the Vulnerable Software and Affected Versions modoboa/modoboa-installer versions prior to 2.0.4 Description The issue is related to improper restriction of excessive authentication attempts. This can potentially lead to exploitation. Recommendations For versions prior to 2.0.4, update to...
modoboa security vulnerability
modoboa is an email hosting and management platform for individual developers. A security vulnerability exists in versions prior to modoboa 2.0.4, which stems from improperly limiting excessive authentication attempts...
CVE-2023-0860
CVE-2023-0860 affects the GitHub repository modoboa/modoboa-installer, with the vulnerability present in versions prior to 2.0.4. The issue arises from an improper restriction of excessive authentication attempts, as documented across multiple sources. The CVSS indicates a High impact (availabili...
CVE-2023-0860
Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4...
CVE-2023-0860 Improper Restriction of Excessive Authentication Attempts in modoboa/modoboa-installer
Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4...
No Protection Against Bruteforce Attacks on Login Page in
Description Modoboa does not restrict or limit unsuccessful login attempts allowing an attacker to brute force the password of a known user Proof of Concept Steps to Reproduce: Capture login request with BurpSuite Send to Intruder Replay the login request with a different password value utilizing...
The XSS playload injected in "Display Name" parameter in creating Contacts are vulnerable to Cross-Site Scripting (Stored/Persistent)
Description The XSS playload injected in "Display Name" parameter in creating Contacts are vulnerable to Cross-Site Scripting Stored/Persistent. Steps to Reproduce: 1. First is go to the user dashboard then contacts: https://demo.modoboa.org/contacts// 2. Then Add new contact, enter the payload...