CVE-2023-0406: Cross-Site Request Forgery (CSRF) in modoboa/modoboa
Published Jan 19, 2023
·Updated
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.
Affected Software
2 affected componentsFixes available
pip/modoboa<2.0.4
2.0.4
Modoboa Modoboa Modoboa<2.0.4
Remediation
Event History
Jan 19, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Advisory Published
via GitHub·06:30 PM
Frequently Asked Questions
1
What is CVE-2023-0406?
CVE-2023-0406 is a vulnerability known as Cross-Site Request Forgery (CSRF) in the GitHub repository modoboa/modoboa prior to version 2.0.4.
2
What is Cross-Site Request Forgery (CSRF)?
Cross-Site Request Forgery (CSRF) is an attack that forces an end user to execute unwanted actions on a web application in which they're authenticated.
3
What is the severity of CVE-2023-0406?
The severity of CVE-2023-0406 is medium with a CVSS score of 4.3.
4
How does CVE-2023-0406 affect Modoboa?
CVE-2023-0406 affects Modoboa versions prior to 2.0.4, allowing attackers to exploit a Cross-Site Request Forgery vulnerability.
5
How can I fix CVE-2023-0406?
To fix CVE-2023-0406, users should update to Modoboa version 2.0.4 or higher.