Executive brief
Weak Password Requirements in GitHub repository modoboa/modoboa prior to 2.1.0.
Affected products
- PyPI modoboa
Junglewise Threat Intelligence
CVE-2023-2160: PYSEC-2023-34 - Weak Password Requirements in GitHub repository modoboa/modoboa prior to 2.1.0.
CVE-2023-2160 · Severity: low · CVSS 3 · Published 2023-04-18
Technologies: modoboa (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-849 - Improper Restriction of Excessive Authentication Attempts in modoboa
- PYSEC-2026-2223 - Modoboa is a mail hosting and management platform. Prior to version 2.7.1, `exec_cmd()` in `modoboa/lib/sysutils.py` always runs subprocess
- PYSEC-2023-216 - Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.
- PYSEC-2023-215 - Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.
- PYSEC-2023-217 - Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.2.2.