Froxlor username/surname AND company field Bypass

Dear Sirs and Madams, I would like to report a business logic error vulnerability that I discovered during my recent penetration test on Froxlor. Specifically, I identified an issue where it was possible to submit the registration form with the essential fields, such as the username and password,...

CVE-2023-50256

Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements...

Design/Logic Flaw

Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements...

CVE-2023-50256 Froxlor username/surname AND company field Bypass

Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements...

CVE-2023-50256

CVE-2023-50256 affects Froxlor open-source server administration software. Prior to version 2.1.2, the registration form allowed essential fields (e.g., username, password) to be submitted blank, bypassing mandatory field requirements such as surname and company name. This vulnerability could ena...

CVE-2023-50256 Froxlor username/surname AND company field Bypass

Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements...

CVE-2023-50256

Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements...

CVE-2023-50256 Froxlor username/surname AND company field Bypass

Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements...

PT-2024-13888

Name of the Vulnerable Software and Affected Versions Froxlor versions prior to 2.1.2 Description Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with essential fields, such as the username and password, left...

CVE-2023-50256: Improper Input Validation

Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements...

Froxlor Input Validation Error Vulnerability

Froxlor is a suite of lightweight server management software from the Froxlor team. An input validation error vulnerability exists in versions of Froxlor prior to 2.1.2, which originated from a vulnerability that allows an attacker to bypass system restrictions by leaving basic fields of the...

Privilege Escalation

froxlor/froxlor is vulnerable to Privilege Escalation. The vulnerability is caused by improper handling of symbolic links. An attacker could write arbitrary data to the home directory and escalate privileges...

SUSE CVE-2023-6069

Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0...

GHSA-4JCH-8QQ5-HQG6 Froxlor Improper Input Validation vulnerability

Improper Input Validation in GitHub repository froxlor/froxlor prior to 2.1.0-beta1...

CVE-2023-6069

Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0...

CVE-2023-6069

Froxlor (froxlor/froxlor) is affected by CVE-2023-6069 due to an Improper Link Resolution Before File Access in versions prior to 2.1.0. The underlying issue is in how links are resolved before file access, enabling high-impact outcomes per NVD and CNA metrics. Reported CVSS v3.1 base scores indi...

CVE-2023-6069 Improper Link Resolution Before File Access in froxlor/froxlor

Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0...

CVE-2023-6069

Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0...

CVE-2023-6069 Improper Link Resolution Before File Access in froxlor/froxlor

Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0...

Froxlor Backlink Vulnerability

Froxlor is a lightweight server management software from the Froxlor team. A backlink vulnerability exists in Froxlor versions prior to 2.1.0 that stems from the presence of an improper input validation vulnerability...