CVE-2023-2228

Cross-Site Request Forgery CSRF in GitHub repository modoboa/modoboa prior to 2.1.0...

modoboa-automua (1.0.0) potentially affected by CVE-2023-2228 via modoboa (1.17.0)

modoboa PYPI version 1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua 1.0.0 Source cves: CVE-2023-2228 Source advisory: OSV:PYSEC-2023-36...

CVE-2023-2228 Cross-Site Request Forgery (CSRF) in modoboa/modoboa

Cross-Site Request Forgery CSRF in GitHub repository modoboa/modoboa prior to 2.1.0...

CVE-2023-2228

CVE-2023-2228 affects modoboa/modoboa prior to 2.1.0. The issue is a Cross-Site Request Forgery (CSRF) vulnerability in /admin/accounts/{id}/edit/?active_tab=default, stemming from insufficient request validation. Exploitation requires an authenticated admin user, potentially enabling changes to ...