Skip to content
OpenAdvisories

Vendor

modoboa

18 known vulnerabilities.

Products

modoboa/modoboa 13 modoboa 4 modoboa/modoboa-installer 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-113599

    Modoboa before 2.8.0 IDOR via API v2 armessages Auto-Reply Creation

    Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenticated users to create auto-reply messages for arbitrary mailboxes by supplying another user's mbox value. Attackers can POST to /api/v2/armessages/ to inject a…

    modoboa modoboa
  • Medium 4.3
    CVE-2026-113598

    Modoboa before 2.8.0 IDOR via API v2 alarms bulk_delete

    Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete alarms of other domains via the POST /api/v2/alarms/bulk_delete/ action. Attackers can enumerate sequential alarm IDs to delete DNS, MX a…

    modoboa modoboa
  • Medium 5.3
    CVE-2023-5690

    Cross-Site Request Forgery (CSRF) in modoboa/modoboa

    Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.2.2.

    modoboa modoboa/modoboa modoboa PyPI
  • Medium 6.8
    CVE-2023-2228

    Cross-Site Request Forgery (CSRF) in modoboa/modoboa

    Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.1.0.

    modoboa modoboa/modoboa modoboa PyPI
  • Medium 6.3
    CVE-2023-2160

    Weak Password Requirements in modoboa/modoboa

    Weak Password Requirements in GitHub repository modoboa/modoboa prior to 2.1.0.

    modoboa modoboa/modoboa modoboa PyPI
  • Medium 4.8
    CVE-2023-0949

    Cross-site Scripting (XSS) - Reflected in modoboa/modoboa

    Cross-site Scripting (XSS) - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5.

    modoboa modoboa/modoboa modoboa PyPI
  • Medium 5.4
    CVE-2023-0438

    Cross-Site Request Forgery (CSRF) in modoboa/modoboa

    Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.

    modoboa modoboa/modoboa modoboa PyPI
  • Medium 5.4
    CVE-2023-0398

    Cross-Site Request Forgery (CSRF) in modoboa/modoboa

    Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.

    modoboa modoboa/modoboa modoboa PyPI
  • Medium 5.4
    CVE-2023-0406

    Cross-Site Request Forgery (CSRF) in modoboa/modoboa

    Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.

    modoboa modoboa/modoboa modoboa PyPI