CVE-2023-2228: Cross-Site Request Forgery (CSRF) in modoboa/modoboa
Published Apr 21, 2023
·Updated
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.1.0.
Other sources
modoboa prior to 2.1.0 is vulnerable to cross-site request forgery. An attacker must be logged in as admin to exploit this issue.
— GitHub
Affected Software
2 affected componentsFixes available
pip/modoboa<2.1.0
2.1.0
Modoboa Modoboa<2.1.0
Remediation
Event History
Apr 21, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Advisory Published
via GitHub·03:30 PM
Frequently Asked Questions
1
What is the vulnerability ID for this Cross-Site Request Forgery (CSRF) vulnerability in GitHub repository modoboa/modoboa?
The vulnerability ID for this CSRF vulnerability is CVE-2023-2228.
2
What is the severity of CVE-2023-2228?
CVE-2023-2228 has a severity rating of medium.
3
What software versions are affected by CVE-2023-2228?
CVE-2023-2228 affects versions of Modoboa prior to 2.1.0.
4
How can I fix the CSRF vulnerability in Modoboa version 2.1.0?
To fix the CSRF vulnerability, upgrade Modoboa to version 2.1.0 or later.
5
Where can I find more information about CVE-2023-2228?
More information about CVE-2023-2228 can be found at the following links: [GitHub Commit](https://github.com/modoboa/modoboa/commit/5d886f3d06373d2c3292911bac0772bcd5102343), [Huntr Bounty](https://huntr.dev/bounties/619fb490-69ad-4a2a-b686-4c42a62404a9).