Authentication Bypass in modoboa

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-0777 · ADVISORY
• modoboa/modoboa commit 47d17ac · WEB
• modoboa/modoboa · PACKAGE
• pypa/advisory-database · WEB
• huntr.dev/bounties/a17e7a9f-0fee-4130-a522-5a0466fc17c7 · WEB
• packetstormsecurity.com/files/171744/modoboa-2.0.4-Admin-Takeover.html · WEB
• GitHub Advisory GHSA-rfhw-fm4m-52j6 · ADVISORY

modoboa のその他の脆弱性

• CVE-2026-27602高 7.2Modoboa is a mail hosting and management platform. Prior to version 2.7.1, `exec_cmd()` in `modoboa/lib/sysutils.py` always runs subprocess …
• CVE-2023-5690高 8.8Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.2.2.
• CVE-2023-5689中 5.4Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.
• CVE-2023-5688中 5.4Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.
• CVE-2023-2228中 6.8Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.1.0.