modoboa-automua (=1.0.0) potentially affected by CVE-2023-0406 via modoboa (=1.17.0)

modoboa PYPI version =1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua =1.0.0 Source cves: CVE-2023-0406 Source advisory: OSV:PYSEC-2023-283...

CVE-2023-0406 Cross-Site Request Forgery (CSRF) in modoboa/modoboa

Cross-Site Request Forgery CSRF in GitHub repository modoboa/modoboa prior to 2.0.4...

CVE-2023-0406

The CVE-2023-0406 case concerns the modoboa/modoboa project, where a Cross-Site Request Forgery (CSRF) vulnerability affects versions prior to 2.0.4. The available connected records consistently identify the issue as a CSRF in the GitHub repository modoboa/modoboa and describe the functional impa...