PyPI/modoboa CVE-2023-0398: medium 6.5, EPSS 0.35%

Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.

Action: Upgrade modoboa to 2.0.4 or later.

pip install modoboa==2.0.4

Affected

Fixed versions

Sources

• osv: PYSEC-2023-282
• https://github.com/modoboa/modoboa/commit/8e14ac93669df4f35fcdebd55dc9d2f0fed3ed48
• https://huntr.dev/bounties/0a852351-00ed-44d2-a650-9055b7beed58
• https://github.com/advisories/GHSA-v9gj-5rgp-w33r

CVE-2023-0398 · published 2023-01-19T09:15:00Z · modified 2026-06-10T17:02:21.549866419Z · JSON