← All advisories

Medium severity6.5NVD Advisory· Published Jan 23, 2023· Updated Jun 17, 2026

CVE-2023-0438

CVE-2023-0438

Description

Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
modoboaPyPI	< 2.0.4	2.0.4

Affected products

3

Modoboa/Modoboa2 versions
cpe:2.3:a:modoboa:modoboa:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:modoboa:modoboa:*:*:*:*:*:*:*:*range: <2.0.4
- (no CPE)range: unspecified
ghsa-coords
pkg:pypi/modoboa
Range: < 2.0.4

Patches

Vulnerability mechanics

References

5

github.com/modoboa/modoboa/commit/38d778cc71e370216e067d054ce0169ad83078c8nvdPatchThird Party AdvisoryWEB
huntr.dev/bounties/07a5b61b-306d-47c4-8ff0-06c540c7dfb3nvdExploitIssue TrackingPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-9c64-x3cx-vgmmghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-0438ghsaADVISORY
github.com/pypa/advisory-database/tree/main/vulns/modoboa/PYSEC-2023-284.yamlghsaWEB

News mentions

0

No linked articles in our index yet.