277 matches found
Authentication flaw
Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4...
modoboa-automua (=1.0.0) potentially affected by CVE-2023-0777 via modoboa (=1.17.0)
modoboa PYPI version =1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua =1.0.0 Source cves: CVE-2023-0777 Source advisory: OSV:PYSEC-2023-32...
PYSEC-2023-32
Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4...
PYSEC-2023-32
Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4...
CVE-2023-0777 Authentication Bypass by Primary Weakness in modoboa/modoboa
Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4...
modoboa 安全漏洞
modoboa is an email hosting and management platform for individual developers. A security vulnerability exists in versions prior to modoboa 2.0.4. An attacker can bypass authentication by exploiting the vulnerability...
PT-2023-16520 · Modoboa · Modoboa
Name of the Vulnerable Software and Affected Versions: modoboa/modoboa versions prior to 2.0.4 Description: The issue is related to an Authentication Bypass by Primary Weakness. There is no information provided about the estimated number of potentially affected devices worldwide or real-world...
CVE-2023-0777 Authentication Bypass by Primary Weakness in modoboa/modoboa
Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4...
CVE-2023-0777 Authentication Bypass by Primary Weakness in modoboa/modoboa
Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4...
CVE-2023-0777
CVE-2023-0777 affects modoboa/modoboa up to version 2.0.4, enabling an unauthenticated admin takeover due to a primary weakness in authentication. The NVD entry lists a critical CVSS v3.1 score (9.8) with network access, no privileges, and full confidentiality/Integrity/Availability impact. Conne...
Cross-Site Scripting (XSS)
modoboa is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to a lack of santization in the name fields while creating accounts, which allows an attacker to inject and execute arbitrary JavaScript when viewing the logs and identities pages...
Modoboa Cross-Site Scripting Vulnerability
modoboa is an email hosting and management platform for individual developers. A cross-site scripting vulnerability exists in versions prior to modoboa 2.0.4. An attacker can exploit this vulnerability to perform cross-site scripting attacks...
Cross-Site Scripting (XSS)
modoboa is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the user input before it outputs to the front end via the domain creation form, allowing an attacker to inject and execute malicious JavaScript on a victim's browser...
modoboa cross-site request forgery vulnerability
modoboa is an email hosting and management platform for individual developers. modoboa versions prior to 2.0.4 are vulnerable to cross-site request forgery. An attacker could exploit this vulnerability to perform cross-site request forgery CSRF attacks...
modoboa Cross-site Request Forgery Vulnerability (CNVD-2023-05396)
modoboa is an email hosting and management platform for individual developers. modoboa versions prior to 2.0.4 are vulnerable to cross-site request forgery. An attacker could exploit this vulnerability to perform cross-site request forgery CSRF attacks...
modoboa-automua (=1.0.0) potentially affected by CVE-2023-0470 via modoboa (=1.17.0)
modoboa PYPI version =1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua =1.0.0 Source cves: CVE-2023-0470 Source advisory: OSV:GHSA-C467-5C2G-JP86...
modoboa-automua (=1.0.0) potentially affected by CVE-2023-0519 via modoboa (=1.17.0)
modoboa PYPI version =1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua =1.0.0 Source cves: CVE-2023-0519 Source advisory: OSV:GHSA-JM3M-WR3P-HJRQ...
GHSA-JM3M-WR3P-HJRQ Cross-site Scripting in modoboa
Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...
