Modoboa Modoboa
15 CVEs affecting Modoboa Modoboa. Latest disclosed: 2026-06-29. Critical: 2, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-0777 | Critical | 9.8 | 2023-02-10 | Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4. |
CVE-2023-2227 | Critical | 9.1 | 2023-04-21 | Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0. |
CVE-2023-5690 | High | 8.8 | 2023-10-20 | Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.2.2. |
CVE-2026-56780 | High | 7.5 | 2026-06-29 | Modoboa before 2.9.0 contains an insecure direct object reference vulnerability in the PUT /api/v1/accounts/{pk}/password/ endpoint that allows domain administ… |
CVE-2026-27602 | High | 7.2 | 2026-03-25 | Modoboa is a mail hosting and management platform. Prior to version 2.7.1, `exec_cmd()` in `modoboa/lib/sysutils.py` always runs subprocess calls with `shell=T… |
CVE-2023-2228 | Medium | 6.8 | 2023-04-21 | Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.1.0. |
CVE-2023-0438 | Medium | 6.5 | 2023-01-23 | Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4. |
CVE-2023-0398 | Medium | 6.5 | 2023-01-19 | Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4. |
CVE-2023-2160 | Medium | 6.3 | 2023-04-18 | Weak Password Requirements in GitHub repository modoboa/modoboa prior to 2.1.0. |
CVE-2023-5689 | Medium | 5.4 | 2023-10-20 | Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2. |
CVE-2023-5688 | Medium | 5.4 | 2023-10-20 | Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2. |
CVE-2023-0519 | Medium | 5.4 | 2023-01-26 | Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4. |
CVE-2023-0470 | Medium | 5.4 | 2023-01-26 | Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4. |
CVE-2023-0949 | Medium | 4.8 | 2023-02-22 | Cross-site Scripting (XSS) - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5. |
CVE-2023-0406 | Medium | 4.3 | 2023-01-19 | Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4. |