PyPI/modoboa CVE-2023-2227: critical 9.1, EPSS 44.03%

Improper Authorization in modoboa

Action: Upgrade modoboa to 2.1.0 or later.

pip install modoboa==2.1.0

Affected

Fixed versions

Sources

• osv: GHSA-67mg-gm8m-ph5r
• https://nvd.nist.gov/vuln/detail/CVE-2023-2227
• https://github.com/modoboa/modoboa/commit/7bcd3f6eb264d4e3e01071c97c2bac51cdd6fe97
• https://github.com/modoboa/modoboa
• https://github.com/pypa/advisory-database/tree/main/vulns/modoboa/PYSEC-2023-35.yaml
• https://huntr.dev/bounties/351f9055-2008-4af0-b820-01ff66678bf3

CVE-2023-2227 · published 2023-04-21T15:30:18Z · modified 2024-09-24T21:34:08.122701Z · JSON