Browse CVEs

HIGH 7.2 CVE-2026-27602 Modoboa is a mail hosting and management platform. Prior to version 2.7.1, `exec_cmd()` in `modoboa/lib/sysutils.py` always runs subprocess calls wit… Modoboa 2.7.1+ Fix from $1,9502026-03-25 HIGH 8.8 CVE-2023-5690 Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.2.2. Modoboa 2.2.2+ Fix from $1,9502023-10-20 MEDIUM 5.4 CVE-2023-5688 Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2. Modoboa 2.2.2+ Fix from $1,6002023-10-20 MEDIUM 5.4 CVE-2023-5689 Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2. Modoboa 2.2.2+ Fix from $1,6002023-10-20 CRITICAL 9.1 CVE-2023-2227EPSS 44% Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0. Modoboa 2.1.0+ Fix from $2,3002023-04-21 MEDIUM 6.8 CVE-2023-2228 Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.1.0. Modoboa 2.1.0+ Fix from $1,6002023-04-21 CRITICAL 9.8 CVE-2023-2160 Weak Password Requirements in GitHub repository modoboa/modoboa prior to 2.1.0. Modoboa 2.1.0+ Fix from $2,3002023-04-18 HIGH 7.5 CVE-2023-0860 Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4. Installer 2.0.4+ Fix from $1,9502023-02-16 CRITICAL 9.8 CVE-2023-0777EPSS 15% Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4. Modoboa 2.0.4+ Fix from $2,3002023-02-10 MEDIUM 5.4 CVE-2023-0519 Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4. Modoboa 2.0.4+ Fix from $1,6002023-01-26 MEDIUM 5.4 CVE-2023-0470 Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4. Modoboa 2.0.4+ Fix from $1,6002023-01-26 MEDIUM 6.5 CVE-2023-0438 Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4. Modoboa 2.0.4+ Fix from $1,6002023-01-23 MEDIUM 6.5 CVE-2023-0398 Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4. Modoboa 2.0.4+ Fix from $1,6002023-01-19 HIGH 7.5 CVE-2019-19702 The modoboa-dmarc plugin 1.1.0 for Modoboa is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker… Modoboa Dmarc No fix yet Fix from $1,9502019-12-10