modoboa

Records19All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

modoboa records in CISA KEV

No modoboa vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Modoboa-dmarc · all components

TI-2019-14197 CVE-2019-19702 · GHSA-vc42-mgr2-w34r

LOW 36

The modoboa-dmarc plugin 1.1.0 for Modoboa is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01465 Published 2019-12-10 Fixed in 1.2.0 CWE-611