PyPI/modoboa CVE-2023-0406: medium 4.3, EPSS 0.39%

Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.

Action: Upgrade modoboa to 2.0.4 or later.

pip install modoboa==2.0.4

Affected

Fixed versions

Sources

• osv: PYSEC-2023-283
• https://github.com/modoboa/modoboa/commit/7f0573e917227686d2cc127be1364e2908740807
• https://huntr.dev/bounties/d7007f76-3dbc-48a7-a2fb-377040fe100c
• https://github.com/advisories/GHSA-g298-59pg-93h7

CVE-2023-0406 · published 2023-01-19T18:15:00Z · modified 2026-06-10T17:02:21.544978855Z · JSON