{"action":"Upgrade modoboa to 2.0.4 or later.","affected":[{"fixed":"2.0.4","introduced":"0"}],"component":"modoboa","cve_ids":["CVE-2023-0777"],"ecosystem":"PyPI","epss":0.15207,"exploited":false,"fixed_versions":["2.0.4"],"ghsa_id":"GHSA-rfhw-fm4m-52j6","id":"tcs_01M5KFXWKJGVYQVS6J8FE0FFMP","modified_at":"2024-09-24T21:34:56.602947Z","published_at":"2023-02-10T21:30:24Z","references":["https://osv.dev/vulnerability/GHSA-rfhw-fm4m-52j6","https://nvd.nist.gov/vuln/detail/CVE-2023-0777","https://github.com/modoboa/modoboa/commit/47d17ac6643f870719691073956a26e4be0a4806","https://github.com/modoboa/modoboa","https://github.com/pypa/advisory-database/tree/main/vulns/modoboa/PYSEC-2023-32.yaml","https://huntr.dev/bounties/a17e7a9f-0fee-4130-a522-5a0466fc17c7","http://packetstormsecurity.com/files/171744/modoboa-2.0.4-Admin-Takeover.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-rfhw-fm4m-52j6","url":"https://osv.dev/vulnerability/GHSA-rfhw-fm4m-52j6"}],"summary":"Authentication Bypass in modoboa"}