Executive brief
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.1.0.
Affected products
- PyPI modoboa
Junglewise Threat Intelligence
CVE-2023-2228: PYSEC-2023-36 - Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.1.0.
CVE-2023-2228 · Severity: low · CVSS 3.1 · Published 2023-04-21
Technologies: modoboa (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-849 - Improper Restriction of Excessive Authentication Attempts in modoboa
- PYSEC-2026-2223 - Modoboa is a mail hosting and management platform. Prior to version 2.7.1, `exec_cmd()` in `modoboa/lib/sysutils.py` always runs subprocess
- PYSEC-2023-216 - Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.
- PYSEC-2023-215 - Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.
- PYSEC-2023-217 - Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.2.2.