PyPI/modoboa CVE-2023-5688: medium 5.4, EPSS 0.66%

Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.

Action: Upgrade modoboa to 2.2.2 or later.

pip install modoboa==2.2.2

Affected

Fixed versions

Sources

• osv: PYSEC-2023-215
• https://huntr.com/bounties/0ceb10e4-952b-4ca4-baf8-5b6f12e3a8a7
• https://github.com/modoboa/modoboa/commit/d33d3cd2d11dbfebd8162c46e2c2a9873919a967
• https://github.com/advisories/GHSA-pqgm-9g82-wcm7

CVE-2023-5688 · published 2023-10-20T17:15:00Z · modified 2026-06-10T17:02:21.544254244Z · JSON