PyPI/modoboa CVE-2023-2228: unknown, EPSS 0.38%

Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.1.0.

Action: Upgrade modoboa to 2.1.0 or later.

pip install modoboa==2.1.0

Affected

Fixed versions

Sources

• osv: PYSEC-2023-36
• https://huntr.dev/bounties/619fb490-69ad-4a2a-b686-4c42a62404a9
• https://github.com/modoboa/modoboa/commit/5d886f3d06373d2c3292911bac0772bcd5102343
• https://github.com/advisories/GHSA-6pvf-cq4f-hfjp

CVE-2023-2228 · published 2023-04-21T13:15:00Z · modified 2026-06-10T17:02:22.083325133Z · JSON