{"action":"Upgrade modoboa to 2.0.5 or later.","affected":[{"fixed":"2.0.5","introduced":"0"}],"component":"modoboa","cve_ids":["CVE-2023-0949"],"ecosystem":"PyPI","epss":0.00498,"exploited":false,"fixed_versions":["2.0.5"],"ghsa_id":"GHSA-mgmm-cmhj-2h5f","id":"tcs_01M5KFR27S4EVNBJ8F6VDG7S1M","modified_at":"2024-09-25T20:23:10.183094Z","published_at":"2023-02-22T09:30:18Z","references":["https://osv.dev/vulnerability/GHSA-mgmm-cmhj-2h5f","https://nvd.nist.gov/vuln/detail/CVE-2023-0949","https://github.com/modoboa/modoboa/commit/aa74e9a4a870162eea169e0a6a2eab841f8811b7","https://github.com/modoboa/modoboa","https://github.com/pypa/advisory-database/tree/main/vulns/modoboa/PYSEC-2023-33.yaml","https://huntr.dev/bounties/ef87be4e-493b-4ee9-9738-44c55b8acc19"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-mgmm-cmhj-2h5f","url":"https://osv.dev/vulnerability/GHSA-mgmm-cmhj-2h5f"}],"summary":"modoboa Cross-site Scripting vulnerability"}