PyPI/modoboa CVE-2023-0949: unknown, EPSS 0.50%

Cross-site Scripting (XSS) - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5.

Action: Upgrade modoboa to 2.0.5 or later.

pip install modoboa==2.0.5

Affected

Fixed versions

Sources

• osv: PYSEC-2023-33
• https://github.com/modoboa/modoboa/commit/aa74e9a4a870162eea169e0a6a2eab841f8811b7
• https://huntr.dev/bounties/ef87be4e-493b-4ee9-9738-44c55b8acc19
• https://github.com/advisories/GHSA-mgmm-cmhj-2h5f

CVE-2023-0949 · published 2023-02-22T09:15:00Z · modified 2026-06-10T17:02:21.984461595Z · JSON