Froxlor Session Fixation vulnerability

Versions of froxlor/froxlor prior to release 2.1.0 did not regenerate session ids appropriately which may result in session fixation...

CVE-2023-3192

Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0...

CVE-2023-3192

Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0...

Session fixation

Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0...

PT-2023-23520 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor/froxlor versions prior to 2.1.0 Description: The issue is related to session fixation, where session ids are not regenerated appropriately. This may result in session fixation. Recommendations: For versions prior to 2.1.0, update to...

CVE-2023-3192

CVE-2023-3192 affects froxlor/froxlor versions prior to 2.1.0. The root cause is failure to regenerate session IDs, which may enable session fixation . Documents consistently describe this issue and its impact as an authorization/session management risk. The primary remediation is to upgrade to v...

CVE-2023-3192 Session Fixation in froxlor/froxlor

Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0...

Froxlor 授权问题漏洞

Froxlor is a lightweight server management software from the Froxlor team. An authorization issue vulnerability exists in versions of Froxlor prior to 2.1.0 that stems from session fixing...

CVE-2023-3192 Session Fixation in froxlor/froxlor

Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0...

CVE-2023-3192: Session Fixation

Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0...

GHSA-CHW4-88XC-79W6 Froxlor vulnerable to Improper Restriction of Excessive Authentication Attempts

Improper Restriction of Excessive Authentication Attempts in GitHub repository froxlor/froxlor prior to 2.0.20...

GHSA-GHQQ-JFX7-F6M9 Froxlor vulnerable to Path Traversal

Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20...

Froxlor vulnerable to Path Traversal

Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20...

CVE-2023-3173

Improper Restriction of Excessive Authentication Attempts in GitHub repository froxlor/froxlor prior to 2.0.20...

CVE-2023-3173

Improper Restriction of Excessive Authentication Attempts in GitHub repository froxlor/froxlor prior to 2.0.20...

CVE-2023-3172

Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20...

CVE-2023-3172

Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20...

Path traversal

Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20...

CVE-2023-3173 Improper Restriction of Excessive Authentication Attempts in froxlor/froxlor

Improper Restriction of Excessive Authentication Attempts in GitHub repository froxlor/froxlor prior to 2.0.20...

CVE-2023-3172

CVE-2023-3172 exposes a path traversal vulnerability in froxlor/froxlor prior to 2.0.20. The issue allows accessing files/directories outside the web root, with impact on confidentiality, integrity, and availability as described. Affected software: Froxlor versions before 2.0.20; root cause: path...