Skip to main content
← PyPI

modoboa

15 known vulnerabilities (2 critical, 6 high, 7 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
15 · 2 critical, 6 high, 7 medium
Weekly downloads
1,301
Dependents
12
Registry
PyPI

Advisories 15

  • Modoboa has an OS Command Injection

    Affected: fixed in 2.7.1.

  • CVE-2023-5690Medium 5.3

    Cross-Site Request Forgery (CSRF) in modoboa/modoboa

    Affected: fixed in 2.2.2; fixed in 2.2.2.

  • Cross-site Scripting (XSS) - DOM in modoboa/modoboa

    Affected: fixed in 2.2.2; fixed in 2.2.2.

  • CVE-2023-5688Critical 9.8

    Cross-site Scripting (XSS) - DOM in modoboa/modoboa

    Affected: fixed in 2.2.2; fixed in 2.2.2.

  • CVE-2023-2228Medium 6.8

    Cross-Site Request Forgery (CSRF) in modoboa/modoboa

    Affected: fixed in 2.1.0; fixed in 2.1.0.

  • CVE-2023-2227Critical 9.1

    Improper Authorization in modoboa/modoboa

    Affected: fixed in 2.1.0; fixed in 2.1.0.

  • CVE-2023-2160Medium 6.3

    Weak Password Requirements in modoboa/modoboa

    Affected: fixed in 2.1.0; fixed in 2.1.0.

  • CVE-2023-0949Medium 4.8

    Cross-site Scripting (XSS) - Reflected in modoboa/modoboa

    Affected: fixed in 2.0.5; fixed in 2.0.5.

  • Improper Restriction of Excessive Authentication Attempts in modoboa/modoboa-installer

    Affected: fixed in 2.0.4.

  • Authentication Bypass by Primary Weakness in modoboa/modoboa

    Affected: fixed in 2.0.4; fixed in 2.0.4.

  • Cross-site Scripting (XSS) - Stored in modoboa/modoboa

    Affected: fixed in 2.0.4; fixed in 2.0.4.

  • Cross-site Scripting (XSS) - Stored in modoboa/modoboa

    Affected: fixed in 2.0.4; fixed in 2.0.4.

  • CVE-2023-0438Medium 5.4

    Cross-Site Request Forgery (CSRF) in modoboa/modoboa

    Affected: fixed in 2.0.4; fixed in 2.0.4.

  • CVE-2023-0406Medium 5.4

    Cross-Site Request Forgery (CSRF) in modoboa/modoboa

    Affected: fixed in 2.0.4; fixed in 2.0.4.

  • CVE-2023-0398Medium 5.4

    Cross-Site Request Forgery (CSRF) in modoboa/modoboa

    Affected: fixed in 2.0.4; fixed in 2.0.4.