modoboa-automua (1.0.0) potentially affected by CVE-2023-0777 via modoboa (1.17.0)

modoboa PYPI version 1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua 1.0.0 Source cves: CVE-2023-0777 Source advisory: OSV:GHSA-RFHW-FM4M-52J6...

CVE-2023-0777

Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4...

Authentication flaw

Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4...

PYSEC-2023-32

Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4...

modoboa-automua (1.0.0) potentially affected by CVE-2023-0777 via modoboa (1.17.0)

modoboa PYPI version 1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua 1.0.0 Source cves: CVE-2023-0777 Source advisory: OSV:PYSEC-2023-32...

PYSEC-2023-32

Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4...

CVE-2023-0777 Authentication Bypass by Primary Weakness in modoboa/modoboa

Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4...

CVE-2023-0777

CVE-2023-0777 affects modoboa/modoboa up to version 2.0.4, enabling an unauthenticated admin takeover due to a primary weakness in authentication. The NVD entry lists a critical CVSS v3.1 score (9.8) with network access, no privileges, and full confidentiality/Integrity/Availability impact. Conne...

CVE-2023-0777 Authentication Bypass by Primary Weakness in modoboa/modoboa

Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4...

CVE-2023-0777 Authentication Bypass by Primary Weakness in modoboa/modoboa

Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4...

CVE-2023-0777

Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4...

CVE-2023-0777: Authentication Bypass by Primary Weakness

Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4...

modoboa-automua (1.0.0) potentially affected by CVE-2023-0777 via modoboa (1.17.0)

modoboa PYPI version 1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua 1.0.0 Source cves: CVE-2023-0777 Source advisory: MEND:CVE-2023-0777...

PT-2023-16520 · Modoboa · Modoboa

Name of the Vulnerable Software and Affected Versions: modoboa/modoboa versions prior to 2.0.4 Description: The issue is related to an Authentication Bypass by Primary Weakness. There is no information provided about the estimated number of potentially affected devices worldwide or real-world...

modoboa security vulnerability

modoboa is an email hosting and management platform for individual developers. A security vulnerability exists in versions prior to modoboa 2.0.4. An attacker can bypass authentication by exploiting the vulnerability...

Cross-Site Scripting (XSS)

modoboa is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to a lack of santization in the name fields while creating accounts, which allows an attacker to inject and execute arbitrary JavaScript when viewing the logs and identities pages...

Modoboa Cross-Site Scripting Vulnerability

modoboa is an email hosting and management platform for individual developers. A cross-site scripting vulnerability exists in versions prior to modoboa 2.0.4. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

Cross-Site Scripting (XSS)

modoboa is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the user input before it outputs to the front end via the domain creation form, allowing an attacker to inject and execute malicious JavaScript on a victim's browser...

modoboa Cross-site Request Forgery Vulnerability (CNVD-2023-05396)

modoboa is an email hosting and management platform for individual developers. modoboa versions prior to 2.0.4 are vulnerable to cross-site request forgery. An attacker could exploit this vulnerability to perform cross-site request forgery CSRF attacks...

modoboa cross-site request forgery vulnerability

modoboa is an email hosting and management platform for individual developers. modoboa versions prior to 2.0.4 are vulnerable to cross-site request forgery. An attacker could exploit this vulnerability to perform cross-site request forgery CSRF attacks...