Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40381
HistoryMay 02, 2023 - 8:25 a.m.

Improper Authorization

2023-05-0208:25:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
modoboa
missing authorization
vulnerability
/api/v2/parameters/core/
sensitive information

0.012 Low

EPSS

Percentile

85.1%

modoboa is vulnerable to Missing Authorization. The vulnerability exists due to missing authorization checks on the /api/v2/parameters/core/ API endpoint which allows an attacker to gain sensitive information.

CPENameOperatorVersion
modoboale2.0.5
modoboale2.0.5

0.012 Low

EPSS

Percentile

85.1%