1 matches found
Froxlor: Credential and 2FA secret disclosure via Froxlor API endpoints
Summary Several Froxlor API command classes return sensitive authentication material in JSON API responses. The affected endpoints retrieve full database rows using SELECT , SELECT alias., or equivalent full-row queries, then return the results directly through $this-response... without removing...
9CVSS5.7AI score0.00585EPSS
SaveExploits0References5Affected Software1
20