CVE-2023-0438: Cross-Site Request Forgery (CSRF) in modoboa/modoboa
Published Jan 23, 2023
·Updated
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.
Affected Software
2 affected componentsFixes available
pip/modoboa<2.0.4
2.0.4
Modoboa Modoboa<2.0.4
Remediation
Event History
Jan 23, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Advisory Published
via GitHub·03:30 PM
Frequently Asked Questions
1
What is CVE-2023-0438?
CVE-2023-0438 is a Cross-Site Request Forgery (CSRF) vulnerability in the GitHub repository modoboa/modoboa prior to version 2.0.4.
2
What is the severity of CVE-2023-0438?
CVE-2023-0438 has a severity rating of medium (6.5 out of 10).
3
How does CVE-2023-0438 affect Modoboa?
CVE-2023-0438 affects Modoboa versions prior to 2.0.4 and allows for Cross-Site Request Forgery (CSRF) attacks.
4
What is the Common Weakness Enumeration (CWE) for CVE-2023-0438?
The Common Weakness Enumeration (CWE) for CVE-2023-0438 is CWE-352.
5
How can I fix CVE-2023-0438?
To fix CVE-2023-0438, you should update Modoboa to version 2.0.4 or later.