Log in Start free

modoboa

Products

ProductCVEsExploitedLatest
modoboa/modoboa13–Oct 20, 2023
modoboa4–Oct 20, 2026
modoboa/modoboa-installer1–Feb 16, 2023

Exploited and recent CVEs

  • CVE-2026-113599 Medium 5.4 Modoboa before 2.8.0 IDOR via API v2 armessages Auto-Reply Creation 0.3%
  • CVE-2026-113598 Medium 4.3 Modoboa before 2.8.0 IDOR via API v2 alarms bulk_delete 0.3%
  • CVE-2026-56780 High 7.5 Modoboa < 2.9.0 - Insecure Direct Object Reference in Account Password Change API 0.5%
  • CVE-2026-27602 High 7.2 Modoboa has an OS Command Injection 0.6%
  • CVE-2023-5690 Medium 5.3 Cross-Site Request Forgery (CSRF) in modoboa/modoboa 0.5%
  • CVE-2023-5689 High 7.1 Cross-site Scripting (XSS) - DOM in modoboa/modoboa 0.6%
  • CVE-2023-5688 Critical 9.8 Cross-site Scripting (XSS) - DOM in modoboa/modoboa 0.7%
  • CVE-2023-2228 Medium 6.8 Cross-Site Request Forgery (CSRF) in modoboa/modoboa 0.4%
  • CVE-2023-2227 Critical 9.1 Improper Authorization in modoboa/modoboa 44.0%
  • CVE-2023-2160 Medium 6.3 Weak Password Requirements in modoboa/modoboa 0.6%
  • CVE-2023-0949 Medium 4.8 Cross-site Scripting (XSS) - Reflected in modoboa/modoboa 0.5%
  • CVE-2023-0860 High 7.8 Improper Restriction of Excessive Authentication Attempts in modoboa/modoboa-installer 0.7%
  • CVE-2023-0777 High 8.6 Authentication Bypass by Primary Weakness in modoboa/modoboa 15.2%
  • CVE-2023-0470 High 7.1 Cross-site Scripting (XSS) - Stored in modoboa/modoboa 0.6%
  • CVE-2023-0519 High 7.1 Cross-site Scripting (XSS) - Stored in modoboa/modoboa 0.5%
  • CVE-2023-0438 Medium 5.4 Cross-Site Request Forgery (CSRF) in modoboa/modoboa 0.4%
  • CVE-2023-0398 Medium 5.4 Cross-Site Request Forgery (CSRF) in modoboa/modoboa 0.4%
  • CVE-2023-0406 Medium 5.4 Cross-Site Request Forgery (CSRF) in modoboa/modoboa 0.4%