PT-2019-15920

Name of the Vulnerable Software and Affected Versions Modoboa modoboa-dmarc plugin version 1.1.0 Description The issue allows for an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to perform a denial of service against the DMARC reporting...

PT-2019-20123

Name of the Vulnerable Software and Affected Versions modoboa-dmarc plugin version 1.1.0 Description The issue allows for an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to perform a denial of service against the DMARC reporting...

CVE-2019-19702: Improper Restriction of XML External Entity Reference

The modoboa-dmarc plugin 1.1.0 for Modoboa is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to perform a denial of service against the DMARC reporting functionality, such as by referencing the /dev/random file within XML...