Vulnerabilities in modoboa
16 resultsVexday analysis
Modoboa apresenta um perfil de risco moderado com 16 vulnerabilidades catalogadas, das quais 2 são críticas, mas nenhuma sob exploração ativa confirmada. A fraqueza dominante é CWE-352 (Cross-Site Request Forgery), indicando deficiências na validação de requisições. O risco atual é estável, com apenas 1 vulnerabilidade publicada nos últimos 90 dias, sugerindo que a adoção de patches conhecidos é prioridade maior que resposta a ameaças emergentes.
CVE-2023-2227CRITICALImproper Authorization in modoboa/modoboaEPSS 44.0%CVE-2023-0777HIGHAuthentication Bypass by Primary Weakness in modoboa/modoboaEPSS 15.2%CVE-2023-0860HIGHImproper Restriction of Excessive Authentication Attempts in modoboa/modoboa-installerEPSS 0.7%CVE-2023-2160MEDIUMWeak Password Requirements in modoboa/modoboaEPSS 0.6%CVE-2023-0470HIGHCross-site Scripting (XSS) - Stored in modoboa/modoboaEPSS 0.6%CVE-2026-27602HIGHModoboa has an OS Command InjectionEPSS 0.6%CVE-2023-5688CRITICALCross-site Scripting (XSS) - DOM in modoboa/modoboaEPSS 0.6%CVE-2023-5689HIGHCross-site Scripting (XSS) - DOM in modoboa/modoboaEPSS 0.5%CVE-2023-0519HIGHCross-site Scripting (XSS) - Stored in modoboa/modoboaEPSS 0.5%CVE-2023-0949MEDIUMCross-site Scripting (XSS) - Reflected in modoboa/modoboaEPSS 0.5%CVE-2023-5690MEDIUMCross-Site Request Forgery (CSRF) in modoboa/modoboaEPSS 0.4%CVE-2023-0406MEDIUMCross-Site Request Forgery (CSRF) in modoboa/modoboaEPSS 0.4%CVE-2023-2228MEDIUMCross-Site Request Forgery (CSRF) in modoboa/modoboaEPSS 0.4%CVE-2023-0398MEDIUMCross-Site Request Forgery (CSRF) in modoboa/modoboaEPSS 0.3%CVE-2023-0438MEDIUMCross-Site Request Forgery (CSRF) in modoboa/modoboaEPSS 0.3%CVE-2026-56780HIGHModoboa < 2.9.0 - Insecure Direct Object Reference in Account Password Change APIEPSS 0.3%