Improper Restriction of Excessive Authentication Attempts in modoboa

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-0860 · ADVISORY
• modoboa/modoboa-installer commit 63d92b7 · WEB
• modoboa/modoboa · PACKAGE
• huntr.dev/bounties/64f3ab93-1357-4468-8ff4-52bbcec18cca · WEB
• pypi.org/project/modoboa · PACKAGE
• GitHub Advisory GHSA-q9ww-gjpw-p9g6 · ADVISORY

modoboa의 다른 취약점

• CVE-2026-27602높음 7.2Modoboa is a mail hosting and management platform. Prior to version 2.7.1, `exec_cmd()` in `modoboa/lib/sysutils.py` always runs subprocess …
• CVE-2023-5690높음 8.8Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.2.2.
• CVE-2023-5689보통 5.4Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.
• CVE-2023-5688보통 5.4Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.
• CVE-2023-2228보통 6.8Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.1.0.