modoboa Cross-site Scripting vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2023-5689 · ADVISORY
• modoboa/modoboa commit d33d3cd · WEB
• modoboa/modoboa · PACKAGE
• pypa/advisory-database · WEB
• huntr.com/bounties/24835833-3421-412b-bafb-1b7ea3cf60e6 · WEB
• GitHub Advisory GHSA-9wj3-cfq8-wpvj · ADVISORY

Lỗ hổng khác của modoboa

• CVE-2026-27602CAO 7.2Modoboa is a mail hosting and management platform. Prior to version 2.7.1, `exec_cmd()` in `modoboa/lib/sysutils.py` always runs subprocess …
• CVE-2023-5690CAO 8.8Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.2.2.
• CVE-2023-5688TRUNG BÌNH 5.4Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.
• CVE-2023-2228TRUNG BÌNH 6.8Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.1.0.
• CVE-2023-2227NGHIÊM TRỌNG 9.1Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0.