Vulnerabilities in modoboa
18 resultsCVE-2023-2227CRITICALImproper Authorization in modoboa/modoboaEPSS 43.8%CVE-2023-0777HIGHAuthentication Bypass by Primary Weakness in modoboa/modoboaEPSS 15.1%CVE-2023-0860HIGHImproper Restriction of Excessive Authentication Attempts in modoboa/modoboa-installerEPSS 0.7%CVE-2023-5688CRITICALCross-site Scripting (XSS) - DOM in modoboa/modoboaEPSS 0.7%CVE-2023-0470HIGHCross-site Scripting (XSS) - Stored in modoboa/modoboaEPSS 0.6%CVE-2023-2160MEDIUMWeak Password Requirements in modoboa/modoboaEPSS 0.6%CVE-2023-5689HIGHCross-site Scripting (XSS) - DOM in modoboa/modoboaEPSS 0.6%CVE-2026-27602HIGHModoboa has an OS Command InjectionEPSS 0.6%CVE-2023-5690MEDIUMCross-Site Request Forgery (CSRF) in modoboa/modoboaEPSS 0.5%CVE-2023-0519HIGHCross-site Scripting (XSS) - Stored in modoboa/modoboaEPSS 0.5%CVE-2023-0949MEDIUMCross-site Scripting (XSS) - Reflected in modoboa/modoboaEPSS 0.5%CVE-2026-56780HIGHModoboa < 2.9.0 - Insecure Direct Object Reference in Account Password Change APIEPSS 0.5%CVE-2023-0406MEDIUMCross-Site Request Forgery (CSRF) in modoboa/modoboaEPSS 0.4%CVE-2023-2228MEDIUMCross-Site Request Forgery (CSRF) in modoboa/modoboaEPSS 0.4%CVE-2023-0398MEDIUMCross-Site Request Forgery (CSRF) in modoboa/modoboaEPSS 0.4%CVE-2023-0438MEDIUMCross-Site Request Forgery (CSRF) in modoboa/modoboaEPSS 0.4%CVE-2026-113599MEDIUMModoboa before 2.8.0 IDOR via API v2 armessages Auto-Reply CreationEPSS 0.3%CVE-2026-113598MEDIUMModoboa before 2.8.0 IDOR via API v2 alarms bulk_deleteEPSS 0.3%