CVE-2023-0406: Cross-Site Request Forgery (CSRF)

January 19, 2023 (updated January 27, 2023)

Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.

References

github.com/modoboa/modoboa/commit/7f0573e917227686d2cc127be1364e2908740807
huntr.dev/bounties/d7007f76-3dbc-48a7-a2fb-377040fe100c
nvd.nist.gov/vuln/detail/CVE-2023-0406

Detect and mitigate CVE-2023-0406 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →