Exploitation Summary
EIP tracks 1 public exploit for CVE-2023-0777. PoCs published by 7h3h4ckv157. A Nuclei detection template is also available.
AI-analyzed exploit summary This Go script exploits an authentication bypass vulnerability in Modoboa by brute-forcing admin credentials via the API endpoint. It sends multipart/form-data requests with a wordlist to bypass authentication and gain admin access.
Description
Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4.
Exploits (1)
This Go script exploits an authentication bypass vulnerability in Modoboa by brute-forcing admin credentials via the API endpoint. It sends multipart/form-data requests with a wordlist to bypass authentication and gain admin access.
Nuclei Templates (1)
html:"Modoboa" || http.favicon.hash:1949005079 || http.html:"modoboa"
body="Modoboa" || body="modoboa" || icon_hash=1949005079
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H