Lucene search
+L

1055 matches found

osv_ghsa
osv_ghsa
•added 2023/08/11 3:30 a.m.•79 views

GHSA-9RMF-6QGJ-G3WJ Froxlor vulnerable to business logic errors

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22...

3.8CVSS4AI score0.00591EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2023/08/11 3:30 a.m.•48 views

Froxlor vulnerable to business logic errors

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22...

3.8CVSS7AI score0.00591EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2023/08/11 1:15 a.m.•44 views

CVE-2023-4304

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22,2.1.0...

3.8CVSS4.5AI score0.00591EPSS
SaveExploits1References2
Prion
Prion
•added 2023/08/11 1:15 a.m.•22 views

Code injection

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22,2.1.0...

3.3CVSS3.7AI score0.00591EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2023/08/11 12:00 a.m.•75 views

CVE-2023-4304

CVE-2023-4304 concerns Froxlor (froxlor/froxlor) with business logic errors in versions prior to 2.0.22 and 2.1.0. Connected documents identify the affected software as Froxlor and describe the issue as a logic/design flaw in the application rather than a low-level vulnerability in a library. Mit...

3.8CVSS6AI score0.00591EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2023/08/11 12:00 a.m.•9 views

CVE-2023-4304

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22,2.1.0...

5.1CVSS0.00591EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2023/08/11 12:00 a.m.•35 views

CVE-2023-4304 Business Logic Errors in froxlor/froxlor

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22,2.1.0...

3.8CVSS4.4AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/08/11 12:00 a.m.•11 views

PT-2023-28670 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.22 froxlor version 2.1.0 Description: The issue concerns Business Logic Errors in the GitHub repository froxlor/froxlor. Recommendations: For versions prior to 2.0.22, update to version 2.0.22 or later. For versi...

3.8CVSS4AI score0.00591EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/11 12:00 a.m.•3 views

CVE-2023-4304: Undefined Security Weakness

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22,2.1.0...

3.8CVSS5.5AI score0.00591EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/08/11 12:00 a.m.•19 views

Froxlor Security Vulnerability

Froxlor is a lightweight server management software from the Froxlor team. A security vulnerability exists in Froxlor that stems from the presence of a business logic error...

3.8CVSS6.8AI score0.00591EPSS
SaveExploits1References4
CNVD
CNVD
•added 2023/07/18 12:00 a.m.•45 views

Froxlor Command Execution Vulnerability

Froxlor is a set of lightweight server management software from the Froxlor team. A command execution vulnerability exists in versions prior to froxlor 2.0.21 that stems from an output encoding or escaping error. An attacker can exploit the vulnerability to cause command execution...

9.1CVSS6.8AI score0.01008EPSS
SaveExploits1References1
Veracode
Veracode
•added 2023/07/17 7:52 a.m.•26 views

Remote Code Execution

Froxlor is vulnerable to Remote Code Execution. The vulnerability is due to not sanitizing or escaping the export configuration values/output. This leads to attacker including PHP code inside export configuration .json leading to RCE when the same configuration is executed when accessed by a...

7.2CVSS7.4AI score0.01008EPSS
SaveExploits1References3Affected Software1
Github Security Blog
Github Security Blog
•added 2023/07/14 3:32 a.m.•40 views

Froxlor vulnerable to Improper Encoding or Escaping of Output

Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21...

9.1CVSS7AI score0.01008EPSS
SaveExploits1References4Affected Software1
osv_ghsa
osv_ghsa
•added 2023/07/14 3:32 a.m.•85 views

GHSA-C6V5-PF66-XFQ8 Froxlor vulnerable to Improper Encoding or Escaping of Output

Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21...

9.1CVSS7.1AI score0.01008EPSS
SaveExploits1References4
NVD
NVD
•added 2023/07/14 1:15 a.m.•53 views

CVE-2023-3668

Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21...

9.1CVSS0.01008EPSS
SaveExploits1References2
Prion
Prion
•added 2023/07/14 1:15 a.m.•26 views

Input validation

Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21...

5.8CVSS7AI score0.01008EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2023/07/14 12:00 a.m.•76 views

CVE-2023-3668

CVE-2023-3668 affects Froxlor (froxlor/froxlor) prior to version 2.0.21. The root cause is an improper encoding or escaping of output in the repository, which enables a command-execution vulnerability. Multiple sources confirm the impact as command execution in versions before 2.0.21. Remediation...

9.1CVSS7.9AI score0.01008EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2023/07/14 12:00 a.m.•56 views

CVE-2023-3668 Improper Encoding or Escaping of Output in froxlor/froxlor

Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21...

9.1CVSS7.2AI score0.01008EPSS
SaveExploits1References2
Mend
Mend
•added 2023/07/14 12:00 a.m.•7 views

CVE-2023-3668

Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21...

9.4CVSS0.01008EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2023/07/14 12:00 a.m.•46 views

CVE-2023-3668 Improper Encoding or Escaping of Output in froxlor/froxlor

Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21...

9.1CVSS8.2AI score0.01008EPSS
SaveExploits1References4
Rows per page
Query Builder