漏洞描述
Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4.
影响产品
修复建议
建议关注厂商安全公告,及时升级至已修复版本,并结合实际资产暴露情况采取缓解措施。
参考链接
huntr.devhttps://huntr.dev/bounties/a17e7a9f-0fee-4130-a522-5a0466fc17c7/↗packetstormsecurity.comhttp://packetstormsecurity.com/files/171744/modoboa-2.0.4-Admin-Takeover.html↗github.comhttps://github.com/modoboa/modoboa/commit/47d17ac6643f870719691073956a26e4be0a4806↗github.comhttps://github.com/7h3h4ckv157/7h3h4ckv157↗