CVE-2023-50256 Froxlor username/surname AND company field Bypass

Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements...

CVE-2023-50256 Froxlor username/surname AND company field Bypass

Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements...

Froxlor Input Validation Error Vulnerability

Froxlor is a suite of lightweight server management software from the Froxlor team. An input validation error vulnerability exists in versions of Froxlor prior to 2.1.2, which originated from a vulnerability that allows an attacker to bypass system restrictions by leaving basic fields of the...

Privilege Escalation

froxlor/froxlor is vulnerable to Privilege Escalation. The vulnerability is caused by improper handling of symbolic links. An attacker could write arbitrary data to the home directory and escalate privileges...

SUSE CVE-2023-6069

Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0...

GHSA-4JCH-8QQ5-HQG6 Froxlor Improper Input Validation vulnerability

Improper Input Validation in GitHub repository froxlor/froxlor prior to 2.1.0-beta1...

CVE-2023-6069

Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0...

CVE-2023-6069

Froxlor (froxlor/froxlor) is affected by CVE-2023-6069 due to an Improper Link Resolution Before File Access in versions prior to 2.1.0. The underlying issue is in how links are resolved before file access, enabling high-impact outcomes per NVD and CNA metrics. Reported CVSS v3.1 base scores indi...

CVE-2023-6069 Improper Link Resolution Before File Access in froxlor/froxlor

Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0...

CVE-2023-6069 Improper Link Resolution Before File Access in froxlor/froxlor

Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0...

Froxlor Backlink Vulnerability

Froxlor is a lightweight server management software from the Froxlor team. A backlink vulnerability exists in Froxlor versions prior to 2.1.0 that stems from the presence of an improper input validation vulnerability...

PT-2023-32495 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.1.0 Description: The issue is related to improper input validation in the GitHub repository froxlor/froxlor. This can lead to potential security risks. Recommendations: For versions prior to 2.1.0, update to versio...

SUSE CVE-2023-4829

Cross-site Scripting XSS - Stored in GitHub repository froxlor/froxlor prior to 2.0.22...

Cross-site Scripting (XSS)

froxlor/froxlor is vulnerable to Cross-site Scripting XSS. The vulnerability exists because the markdown syntax in the customnotes field is improperly sanitized which allows an attacker to inject and execute html scripts...

Cross-site Scripting

froxlor is vulnerable to Cross-site Scripting. The vulnerability is due to the improper sanitization or validation of input. The attacker can exploit this issue by injecting malicious JavaScript into the webpage...

SUSE CVE-2023-5564

Cross-site Scripting XSS - Stored in GitHub repository froxlor/froxlor prior to 2.1.0-dev1...

GHSA-CVWV-H85M-W37H Cross-site Scripting (XSS) in froxlor/froxlor

Cross-site Scripting XSS - Stored in GitHub repository froxlor/froxlor prior to 2.0.22...

CVE-2023-4829

Cross-site Scripting XSS - Stored in GitHub repository froxlor/froxlor prior to 2.0.22...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository froxlor/froxlor prior to 2.0.22...

CVE-2023-4829

CVE-2023-4829 corresponds to a stored XSS vulnerability in froxlor/froxlor versions prior to 2.0.22. The issue is described across multiple sources (including Red Hat and OSV) as stored XSS in Froxlor’s web interface, with exploit impact unspecified beyond XSS exposure. Remediation guidance avail...