CVE-2023-0398: Cross-Site Request Forgery (CSRF) in modoboa/modoboa
Published Jan 19, 2023
·Updated
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.
Other sources
Modoboa 2.0.3 and prior is vulnerable to Cross-Site Request Forgery. A patch is available and anticipated to be part of version 2.0.4.
— GitHub
Affected Software
2 affected componentsFixes available
pip/modoboa<=2.0.3
2.0.4
Modoboa Modoboa Modoboa<2.0.4
Remediation
Event History
Jan 19, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Advisory Published
via GitHub·09:30 AM
Frequently Asked Questions
1
What is the vulnerability ID for the Cross-Site Request Forgery (CSRF) vulnerability in the GitHub repository modoboa/modoboa?
The vulnerability ID is CVE-2023-0398.
2
What is Cross-Site Request Forgery (CSRF)?
Cross-Site Request Forgery (CSRF) is an attack that tricks the victim into executing unwanted actions on a web application in which they are authenticated.
3
Which version of Modoboa is affected by the CSRF vulnerability?
Modoboa versions prior to 2.0.4 are affected.
4
How severe is the CSRF vulnerability in Modoboa?
The severity of the CSRF vulnerability is medium, with a severity CVSS score of 6.5.
5
How do I fix the CSRF vulnerability in Modoboa?
To fix the CSRF vulnerability, update Modoboa to version 2.0.4 or later.