262 matches found
CVE-2023-0777 Authentication Bypass by Primary Weakness in modoboa/modoboa
Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4...
CVE-2023-0777
CVE-2023-0777 affects modoboa/modoboa up to version 2.0.4, enabling an unauthenticated admin takeover due to a primary weakness in authentication. The NVD entry lists a critical CVSS v3.1 score (9.8) with network access, no privileges, and full confidentiality/Integrity/Availability impact. Conne...
CVE-2023-0777 Authentication Bypass by Primary Weakness in modoboa/modoboa
Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4...
PT-2023-16520 · Modoboa · Modoboa
Name of the Vulnerable Software and Affected Versions: modoboa/modoboa versions prior to 2.0.4 Description: The issue is related to an Authentication Bypass by Primary Weakness. There is no information provided about the estimated number of potentially affected devices worldwide or real-world...
CVE-2023-0777 Authentication Bypass by Primary Weakness in modoboa/modoboa
Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4...
Cross-Site Scripting (XSS)
modoboa is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to a lack of santization in the name fields while creating accounts, which allows an attacker to inject and execute arbitrary JavaScript when viewing the logs and identities pages...
Modoboa Cross-Site Scripting Vulnerability
modoboa is an email hosting and management platform for individual developers. A cross-site scripting vulnerability exists in versions prior to modoboa 2.0.4. An attacker can exploit this vulnerability to perform cross-site scripting attacks...
Cross-Site Scripting (XSS)
modoboa is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the user input before it outputs to the front end via the domain creation form, allowing an attacker to inject and execute malicious JavaScript on a victim's browser...
modoboa cross-site request forgery vulnerability
modoboa is an email hosting and management platform for individual developers. modoboa versions prior to 2.0.4 are vulnerable to cross-site request forgery. An attacker could exploit this vulnerability to perform cross-site request forgery CSRF attacks...
modoboa Cross-site Request Forgery Vulnerability (CNVD-2023-05396)
modoboa is an email hosting and management platform for individual developers. modoboa versions prior to 2.0.4 are vulnerable to cross-site request forgery. An attacker could exploit this vulnerability to perform cross-site request forgery CSRF attacks...
GHSA-JM3M-WR3P-HJRQ Cross-site Scripting in modoboa
Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...
GHSA-C467-5C2G-JP86 Cross-site Scripting in modoboa
Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...
Cross-site Scripting in modoboa
Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...
Cross-site Scripting in modoboa
Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...
CVE-2023-0519
Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...
PYSEC-2023-31
Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...
PYSEC-2023-31
Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...