Code Injection

2023-02-2405:52:28

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

code injection

froxlor

import settings

vulnerability

malicious code

system cronjob

0.001 Low

EPSS

Percentile

39.6%

JSON

froxlor/froxlor is vulnerable to Code Injection. The vulnerability is due to improper sanitization in the import settings feature, which allows an attacker to inject and execute malicious code though the system cronjob.

CPENameOperatorVersion
froxlor/froxlorle2.0.10
froxlor/froxlorle2.0.10

CPE	Name	Operator	Version
	froxlor/froxlor	le	2.0.10
	froxlor/froxlor	le	2.0.10

References

github.com/advisories/GHSA-vp4r-h765-5mwp

github.com/froxlor/froxlor/commit/aa48ffca2bcaf7ae57be3b8147bb3138abdab984

huntr.dev/bounties/b29cf038-06f1-4fb0-9437-08f2991f92a8

huntr.dev/bounties/b29cf038-06f1-4fb0-9437-08f2991f92a8/

0.001 Low

EPSS

Percentile

39.6%

JSON

Related for VERACODE:39395