CVE-2023-0470: Cross-site Scripting (XSS) - Stored in modoboa/modoboa
Published Jan 26, 2023
·Updated
Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4.
Affected Software
2 affected componentsFixes available
pip/modoboa<2.0.4
2.0.4
Modoboa Modoboa Modoboa<2.0.4
Remediation
Event History
Jan 26, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Jan 27, 2023
Advisory Published
via GitHub·12:30 AM
Frequently Asked Questions
1
What is CVE-2023-0470?
CVE-2023-0470 is a vulnerability for Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to version 2.0.4.
2
How severe is CVE-2023-0470?
CVE-2023-0470 has a severity level of high with a score of 5.4.
3
What software is affected by CVE-2023-0470?
The software affected by CVE-2023-0470 is Modoboa prior to version 2.0.4.
4
How can I fix CVE-2023-0470?
To fix CVE-2023-0470, update Modoboa to version 2.0.4 or later.
5
What is the CWE ID for CVE-2023-0470?
The CWE ID for CVE-2023-0470 is CWE-79.