CVE-2023-0398

Description

Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.

How to fix CVE-2023-0398

To remediate CVE-2023-0398, upgrade the affected package to a fixed version below.

• PyPI/modoboa—upgrade to 2.0.4 or later
• PyPI/modoboa—upgrade to 8e14ac93669df4f35fcdebd55dc9d2f0fed3ed48 or later

Is CVE-2023-0398 being exploited?

Low — EPSS is 0.1%, meaning exploitation activity has not been observed at scale.

Affected packages (2)

• from 0, < 2.0.4
• from 0, < 8e14ac93669df4f35fcdebd55dc9d2f0fed3ed48 | from 0, < 2.0.4

CVSS scores

References (6)

• ADVISORYgithub.com/advisories/GHSA-v9gj-5rgp-w33r
• ADVISORYnvd.nist.gov/vuln/detail/CVE-2023-0398
• PATCHgithub.com/modoboa/modoboa
• WEBgithub.com/modoboa/modoboa/commit/8e14ac93669df4f35fcdebd55dc9d2f0fed3ed48