Information Exposure

Overview froxlor/froxlor is a server administration software. Affected versions of this package are vulnerable to Information Exposure in the API response handling process. An attacker can obtain sensitive credential material, including password hashes and TOTP 2FA seeds, by making authenticated...

CVE-2026-62988: Exposure of Sensitive Information to an Unauthorized Actor

Froxlor is open source server administration software. From 2.3.7 until 2.3.8, the Customers.get, Customers.listing, Admins.get, Admins.listing, Ftps.get, and Ftps.listing API commands in lib/Froxlor/Api/Commands/Customers.php, lib/Froxlor/Api/Commands/Admins.php, and...