Skip to content
OpenAdvisories

Package · PyPI

modoboa

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • High 7.2
    CVE-2026-27602

    Modoboa has an OS Command Injection

    Modoboa is a mail hosting and management platform. Prior to version 2.7.1, `exec_cmd()` in `modoboa/lib/sysutils.py` always runs subprocess calls with `shell=True`. Since domain names flow directly into shell command strings without any sanitization, a Resell…

    modoboa modoboa modoboa PyPI
  • Medium 5.3
    CVE-2023-5690

    Cross-Site Request Forgery (CSRF) in modoboa/modoboa

    Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.2.2.

    modoboa modoboa/modoboa modoboa PyPI
  • High 7.1
    CVE-2023-5689

    Cross-site Scripting (XSS) - DOM in modoboa/modoboa

    Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.

    modoboa modoboa/modoboa modoboa PyPI
  • Critical 9.8
    CVE-2023-5688

    Cross-site Scripting (XSS) - DOM in modoboa/modoboa

    Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.

    modoboa modoboa/modoboa modoboa PyPI
  • Medium 6.8
    CVE-2023-2228

    Cross-Site Request Forgery (CSRF) in modoboa/modoboa

    Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.1.0.

    modoboa modoboa/modoboa modoboa PyPI
  • Critical 9.1
    CVE-2023-2227 Scanner template EPSS 44%

    Improper Authorization in modoboa/modoboa

    Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0.

    modoboa modoboa/modoboa modoboa PyPI
  • Medium 6.3
    CVE-2023-2160

    Weak Password Requirements in modoboa/modoboa

    Weak Password Requirements in GitHub repository modoboa/modoboa prior to 2.1.0.

    modoboa modoboa/modoboa modoboa PyPI
  • Medium 4.8
    CVE-2023-0949

    Cross-site Scripting (XSS) - Reflected in modoboa/modoboa

    Cross-site Scripting (XSS) - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5.

    modoboa modoboa/modoboa modoboa PyPI
  • High 7.8
    CVE-2023-0860 Public exploit

    Improper Restriction of Excessive Authentication Attempts in modoboa/modoboa-installer

    Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4.

    modoboa modoboa/modoboa-installer modoboa PyPI
  • High 8.6
    CVE-2023-0777 Public exploit Scanner template EPSS 15%

    Authentication Bypass by Primary Weakness in modoboa/modoboa

    Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4.

    modoboa modoboa/modoboa modoboa PyPI
  • High 7.1
    CVE-2023-0470

    Cross-site Scripting (XSS) - Stored in modoboa/modoboa

    Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4.

    modoboa modoboa/modoboa modoboa PyPI
  • High 7.1
    CVE-2023-0519

    Cross-site Scripting (XSS) - Stored in modoboa/modoboa

    Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4.

    modoboa modoboa/modoboa modoboa PyPI
  • Medium 5.4
    CVE-2023-0438

    Cross-Site Request Forgery (CSRF) in modoboa/modoboa

    Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.

    modoboa modoboa/modoboa modoboa PyPI
  • Medium 5.4
    CVE-2023-0398

    Cross-Site Request Forgery (CSRF) in modoboa/modoboa

    Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.

    modoboa modoboa/modoboa modoboa PyPI
  • Medium 5.4
    CVE-2023-0406

    Cross-Site Request Forgery (CSRF) in modoboa/modoboa

    Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.

    modoboa modoboa/modoboa modoboa PyPI