CVE-2023-2227: Improper Authorization in modoboa/modoboa
Published Apr 21, 2023
·Updated
Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0.
Other sources
In modoboa prior to 2.1.0, sending a GET request to the endpoint /api/v2/parameters/core/ returns sensitive information without any authentication or authorization.
— GitHub
Affected Software
2 affected componentsFixes available
pip/modoboa<2.1.0
2.1.0
Modoboa Modoboa<2.1.0
Remediation
Event History
Apr 21, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Advisory Published
via GitHub·03:30 PM
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-2227.
2
What is the title of the vulnerability?
The title of the vulnerability is Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0.
3
What is the severity of CVE-2023-2227?
The severity of CVE-2023-2227 is critical, with a CVSS severity score of 9.1.
4
What is the affected software for CVE-2023-2227?
The affected software for CVE-2023-2227 is Modoboa Modoboa prior to version 2.1.0.
5
How can I fix CVE-2023-2227?
To fix CVE-2023-2227, you should update Modoboa Modoboa to version 2.1.0 or later.