CVE-2023-0860 PoC — Improper Restriction of Excessive Authentication Attempts in modoboa/modoboa-installer

Source

https://github.com/0xsu3ks/CVE-2023-0860

Associated Vulnerability

Title:Improper Restriction of Excessive Authentication Attempts in modoboa/modoboa-installer (CVE-2023-0860)
Description:Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4.

Readme

# CVE-2023-0860 Brute Force on Modoboa Mail Hosting and Management application v2.0.3
***
Open-source Mail Hosting and Management application, Modoboa <= v2.0.3, does not restrict unauthenticated login attempts allowing for brute force attacks at the login page.

- https://www.cve.org/CVERecord?id=CVE-2023-0860

- https://nvd.nist.gov/vuln/detail/CVE-2023-0860

## Submitted through platform huntr.dev

- https://huntr.dev/bounties/64f3ab93-1357-4468-8ff4-52bbcec18cca/

Vulnerability discovered and reported by Kevin Suckiel (@0xsu3ks) January, 2023.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →