CVE-2023-0949: Cross-site Scripting (XSS) - Reflected in modoboa/modoboa
Published Feb 22, 2023
·Updated
Cross-site Scripting (XSS) - Reflected in GitHub repository modoboa/modoboa prior to 2.0.45.
Other sources
Cross-site Scripting (XSS) - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5.
Affected Software
2 affected componentsFixes available
pip/modoboa<2.0.5
2.0.5
Modoboa Modoboa Modoboa<2.0.5
Remediation
Event History
Feb 22, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Advisory Published
via GitHub·09:30 AM
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-0949.
2
What is the severity of CVE-2023-0949?
CVE-2023-0949 has a severity level of medium (4.8).
3
What is the affected software for CVE-2023-0949?
The affected software for CVE-2023-0949 is Modoboa prior to version 2.0.5.
4
What is the CWE for CVE-2023-0949?
The CWE for CVE-2023-0949 is CWE-79 (Cross-Site Scripting).
5
How do I fix the Cross-Site Scripting (XSS) vulnerability in Modoboa?
To fix the Cross-Site Scripting (XSS) vulnerability in Modoboa, upgrade to version 2.0.5 or later.