Cross-Site Request Forgery in modoboa

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-0406 · ADVISORY
• modoboa/modoboa commit 7f0573e · WEB
• modoboa/modoboa · PACKAGE
• pypa/advisory-database · WEB
• huntr.dev/bounties/d7007f76-3dbc-48a7-a2fb-377040fe100c · WEB
• GitHub Advisory GHSA-g298-59pg-93h7 · ADVISORY

Autres vulnérabilités de modoboa

• CVE-2026-27602ÉLEVÉE 7.2Modoboa is a mail hosting and management platform. Prior to version 2.7.1, `exec_cmd()` in `modoboa/lib/sysutils.py` always runs subprocess …
• CVE-2023-5690ÉLEVÉE 8.8Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.2.2.
• CVE-2023-5689MOYENNE 5.4Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.
• CVE-2023-5688MOYENNE 5.4Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.
• CVE-2023-2228MOYENNE 6.8Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.1.0.