| Package | Affected versions | Patched versions |
|---|---|---|
| modoboa | < 2.1.0 | 2.1.0 |
| modoboa | < 2.1.0 | 2.1.0 |
In modoboa prior to 2.1.0, sending a GET request to the endpoint /api/v2/parameters/core/ returns sensitive information without any authentication or authorization.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free