CVE-2023-5690: Cross-Site Request Forgery (CSRF) in modoboa/modoboa
Published Oct 20, 2023
·Updated
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.2.2.
Affected Software
2 affected componentsFixes available
pip/modoboa<2.2.2
2.2.2
Modoboa Modoboa<2.2.2
Remediation
Event History
Oct 20, 2023
CVE Published
via MITRE·04:22 PM
Data Sourced
via MITRE·04:22 PM
DescriptionSeverityWeakness
Data Sourced
05:15 PM
DescriptionSeverityWeakness
Advisory Published
via GitHub·06:30 PM
May 24, 57290
Event
via FIRST·01:25 AM
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-5690.
2
What is the severity of CVE-2023-5690?
The severity of CVE-2023-5690 is medium with a CVSS score of 5.3.
3
What is Cross-Site Request Forgery (CSRF)?
Cross-Site Request Forgery (CSRF) is a type of attack that forces an unsuspecting user to perform unwanted actions on a web application in which they are authenticated.
4
What is the affected software?
The affected software is modoboa/modoboa prior to version 2.2.2.
5
How do I fix CVE-2023-5690 vulnerability?
To fix the CVE-2023-5690 vulnerability, you should update modoboa/modoboa to version 2.2.2 or later.