CVE-2023-0438

CVSS V2 None CVSS V3 None
Description
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.
Overview
  • CVE ID
  • CVE-2023-0438
  • Assigner
  • security@huntr.dev
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-01-23T14:15:11
  • Last Modified Date
  • 2023-01-30T15:28:00
Weakness Enumerations
CWE URL
CWE-352 http://cwe.mitre.org/data/definitions/352.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:modoboa:modoboa:*:*:*:*:*:*:*:* 1 OR 2.0.4
References
Reference URL Reference Tags
https://github.com/modoboa/modoboa/commit/38d778cc71e370216e067d054ce0169ad83078c8
https://huntr.dev/bounties/07a5b61b-306d-47c4-8ff0-06c540c7dfb3
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-0438
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0438
History
Created Old Value New Value Data Type Notes
2023-01-23 15:14:34 Added to TrackCVE
2023-01-23 15:14:35 Weakness Enumeration new
2023-01-30 15:14:16 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2023-01-30 15:14:21 CVSS V3 information new
2023-01-30 17:14:48 2023-01-30T15:28:00 CVE Modified Date updated
2023-01-30 17:14:48 Undergoing Analysis Analyzed Vulnerability Status updated
2023-01-30 17:14:51 CPE Information updated
2023-01-30 17:14:51 CVSS V3 information new