PYSEC-2019-105
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/modoboa-dmarc/PYSEC-2019-105.yaml
- JSON Data
- https://api.test.osv.dev/v1/vulns/PYSEC-2019-105
- Aliases
- Published
- 2019-12-10T20:15:00Z
- Modified
- 2024-11-22T04:59:31.310543Z
- Summary
- [none]
- Details
-
The modoboa-dmarc plugin 1.1.0 for Modoboa is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this to perform a denial of service against the DMARC reporting functionality, such as by referencing the /dev/random file within XML documents that are emailed to the address in the rua field of the DMARC records of a domain.
- References
Affected packages
PyPI / modoboa-dmarc
Package
- Name
- modoboa-dmarc
- View open source insights on deps.dev
- Purl
- pkg:pypi/modoboa-dmarc