1 matches found
CVE-2026-100710: Exposure of Sensitive Information to an Unauthorized Actor
Froxlor through 2.3.10 does not filter sensitive columns from API responses: Domains::get, Domains::listing, SubDomains::get, and the admin branch of SubDomains::listing perform a wildcard SELECT over the paneldomains table and return the row unmodified, including the paneldomains.dkimprivkey...
6.9CVSS5.9AI score0.00244EPSS
SaveExploits0References2
20