CVE-2023-0438

Description

Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.

How to fix CVE-2023-0438

To remediate CVE-2023-0438, upgrade the affected package to a fixed version below.

• PyPI/modoboa—upgrade to 2.0.4 or later
• PyPI/modoboa—upgrade to 38d778cc71e370216e067d054ce0169ad83078c8 or later

Is CVE-2023-0438 being exploited?

Low — EPSS is 0.2%, meaning exploitation activity has not been observed at scale.

Affected packages (2)

• from 0, < 2.0.4
• from 0, < 38d778cc71e370216e067d054ce0169ad83078c8 | from 0, < 2.0.4

CVSS scores

References (6)

• ADVISORYgithub.com/advisories/GHSA-9c64-x3cx-vgmm
• ADVISORYnvd.nist.gov/vuln/detail/CVE-2023-0438
• PATCHgithub.com/modoboa/modoboa
• WEBgithub.com/modoboa/modoboa/commit/38d778cc71e370216e067d054ce0169ad83078c8