Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/08/18 8:48 p.m.20 views

Froxlor: Credential and 2FA secret disclosure via Froxlor API endpoints

Summary Several Froxlor API command classes return sensitive authentication material in JSON API responses. The affected endpoints retrieve full database rows using SELECT , SELECT alias., or equivalent full-row queries, then return the results directly through $this-response... without removing...

9CVSS5.7AI score0.00585EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder