Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: modoboa/modoboa 2.2.2 Clear all filters
TI-2023-05233 CVE-2023-5690 · GHSA-57cr-rq3f-ppmx

Cross-Site Request Forgery (CSRF) in modoboa/modoboa

Priority HIGH 77

Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.2.2.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00512 Published 2023-10-20 Fixed in 2.2.2 CWE-352
TI-2023-05232 CVE-2023-5689 · GHSA-9wj3-cfq8-wpvj

Cross-site Scripting (XSS) - DOM in modoboa/modoboa

Priority MEDIUM 60

Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00602 Published 2023-10-20 Fixed in 2.2.2 CWE-79
TI-2023-05231 CVE-2023-5688 · GHSA-pqgm-9g82-wcm7

Cross-site Scripting (XSS) - DOM in modoboa/modoboa

Priority HIGH 66

Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00655 Published 2023-10-20 Fixed in 2.2.2 CWE-79