Executive brief
Cross-site Scripting (XSS) - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5.
Affected products
- PyPI modoboa
Junglewise Threat Intelligence
CVE-2023-0949: PYSEC-2023-33 - Cross-site Scripting (XSS) - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5.
CVE-2023-0949 · Severity: low · CVSS 3.1 · Published 2023-02-22
Technologies: modoboa (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-849 - Improper Restriction of Excessive Authentication Attempts in modoboa
- PYSEC-2026-2223 - Modoboa is a mail hosting and management platform. Prior to version 2.7.1, `exec_cmd()` in `modoboa/lib/sysutils.py` always runs subprocess
- PYSEC-2023-216 - Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.
- PYSEC-2023-215 - Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.
- PYSEC-2023-217 - Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.2.2.