Lucene search
+L

930 matches found

CVE
CVE
•added 2022/12/31 12:00 a.m.•89 views

CVE-2022-4867

The CVE-2022-4867 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in froxlor/froxlor prior to version 2.0.0-beta1. Affected software is Froxlor (GitHub repository froxlor/froxlor). The underlying issue is CSRF in the application; exploitation details are not provided in the docu...

4.3CVSS5.5AI score0.00346EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/12/31 12:00 a.m.•48 views

CVE-2022-4868 Improper Authorization in froxlor/froxlor

Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

6.5CVSS4.9AI score0.00641EPSS
SaveExploits1References2
OSV
OSV
•added 2022/12/31 12:00 a.m.•33 views

CVE-2022-4868 Improper Authorization in froxlor/froxlor

Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

6.5CVSS5.8AI score
SaveExploits0References4
OSV
OSV
•added 2022/12/31 12:00 a.m.•29 views

CVE-2022-4867 Cross-Site Request Forgery (CSRF) in froxlor/froxlor

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

3.5CVSS4.4AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2022/12/31 12:00 a.m.•7 views

CVE-2022-4867 Cross-Site Request Forgery (CSRF) in froxlor/froxlor

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

3.5CVSS7AI score0.00346EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/31 12:00 a.m.•2 views

CVE-2022-4868: Improper Authorization

Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

6.5CVSS5.8AI score0.00641EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2022/12/31 12:00 a.m.•10 views

CVE-2022-4868 Improper Authorization in froxlor/froxlor

Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

6.5CVSS6.8AI score0.00641EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/12/31 12:00 a.m.•45 views

CVE-2022-4867 Cross-Site Request Forgery (CSRF) in froxlor/froxlor

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

3.5CVSS5AI score0.00346EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/12/31 12:00 a.m.•16 views

PT-2022-28153 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.0-beta1 Description: The issue is related to improper authorization in the GitHub repository froxlor/froxlor. Recommendations: For versions prior to 2.0.0-beta1, update to version 2.0.0-beta1 or later to resolve...

6.5CVSS5.2AI score0.00641EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2022/12/31 12:00 a.m.•16 views

Froxlor 授权问题漏洞

Froxlor is a lightweight server management software from the Froxlor team. An authorization issue vulnerability exists in versions prior to Froxlor 2.0.0-beta1 that stems from improper authorization...

6.5CVSS5.9AI score0.00641EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/12/31 12:00 a.m.•17 views

PT-2022-28152 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.0-beta1 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository froxlor/froxlor. CSRF is an attack that tricks a user into performing unintended actions on a web application...

4.3CVSS3.9AI score0.00346EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2022/12/31 12:00 a.m.•19 views

Froxlor 跨站请求伪造漏洞

Froxlor is a lightweight server management software from the Froxlor team. A cross-site request forgery vulnerability exists in Froxlor versions prior to 2.0.0-beta1, which stems from cross-site request forgery CSRF...

4.3CVSS4.8AI score0.00346EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/31 12:00 a.m.•2 views

CVE-2022-4867: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

4.3CVSS5.8AI score0.00346EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/12/30 12:00 a.m.•41 views

CVE-2022-4864 Argument Injection in froxlor/froxlor

Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

5.3CVSS5.9AI score0.00479EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2022/12/30 12:00 a.m.•17 views

CVE-2022-4864 Argument Injection in froxlor/froxlor

Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

5.3CVSS7.1AI score0.00479EPSS
SaveExploits1References2
OSV
OSV
•added 2022/12/30 12:00 a.m.•28 views

CVE-2022-4864 Argument Injection in froxlor/froxlor

Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

5.3CVSS5.5AI score
SaveExploits0References4
CVE
CVE
•added 2022/12/30 12:00 a.m.•104 views

CVE-2022-4864

CVE-2022-4864 affects Froxlor (froxlor/froxlor) prior to 2.0.0-beta1. The root cause is argument/parameter injection in the web application, evidenced by an HTML injection PoC and references to parameter handling weaknesses in the vulnerable release. Impact is limited to confidential/integrity ex...

5.4CVSS6AI score0.00479EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2022/12/30 12:00 a.m.•16 views

Froxlor 注入漏洞

Froxlor is a lightweight server management software from the Froxlor team. An injection vulnerability exists in versions prior to Froxlor 2.0.0-beta1, which stems from parameter injection...

5.4CVSS5.7AI score0.00479EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/12/30 12:00 a.m.•11 views

PT-2022-28149 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.0-beta1 Description: The issue is related to Argument Injection in the GitHub repository froxlor/froxlor. Recommendations: For versions prior to 2.0.0-beta1, update to version 2.0.0-beta1 or later to resolve the...

5.4CVSS5.3AI score0.00479EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/30 12:00 a.m.•1 views

CVE-2022-4864: Improper Neutralization of Argument Delimiters in a Command

Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

5.4CVSS5.8AI score0.00479EPSS
SaveExploits1References3
Rows per page
Query Builder