Ecosyste.ms: Advisories

Advisories: GSA_kwCzR0hTQS05YzY0LXgzY3gtdmdtbc4AAxIH

Cross-Site Request Forgery in modoboa

Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.

Permalink: https://github.com/advisories/GHSA-9c64-x3cx-vgmm

Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: 6 days ago
Updated: 6 days ago

CVSS Score: 5.4
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Identifiers: GHSA-9c64-x3cx-vgmm, CVE-2023-0438
References:

• https://nvd.nist.gov/vuln/detail/CVE-2023-0438
• https://github.com/modoboa/modoboa/commit/38d778cc71e370216e067d054ce0169ad83078c8
• https://huntr.dev/bounties/07a5b61b-306d-47c4-8ff0-06c540c7dfb3
• https://github.com/advisories/GHSA-9c64-x3cx-vgmm

Affected Packages