CVE-2023-1307

Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13...

CVE-2023-1307

Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13...

CVE-2023-1307

Froxlor (versions prior to 2.0.13) is affected by an authentication bypass vulnerability (CVE-2023-1307). The root cause involves login handling tied to a password stored as an MD5 hash in the database, enabling an attacker to authenticate despite an invalid password due to PHP type obfuscation. ...