Advisories · Technology
modoboa.
Every CVE that names modoboa among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Modoboa before 2.8.0 IDOR via API v2 armessages Auto-Reply Creation
- modoboa
- Broken access control
- CVSS 5.3 Medium
Modoboa before 2.8.0 IDOR via API v2 alarms bulk_delete
- modoboa
- Broken access control
- CVSS 7.7 High
Modoboa < 2.9.0 - Insecure Direct Object Reference in Account Password Change API
- modoboa
- Broken access control