Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: froxlor/froxlor 2.0.10 Clear all filters
TI-2023-00543 CVE-2023-0572 · GHSA-3chw-8jq2-w769

Unchecked Error Condition in froxlor/froxlor

Priority MEDIUM 63

Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00667 Published 2023-01-29 Fixed in 2.0.10 CWE-391
TI-2023-00537 CVE-2023-0566 · GHSA-w7w4-qjgg-372x

Cross-site scripting in froxlor/froxlor

Priority MEDIUM 63

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in froxlor/froxlor prior to 2.0.10.

CVSS 3.1MEDIUM 6.2 Network High privileges No interaction EPSS 0.00439 Published 2023-01-29 Fixed in 2.0.10 CWE-79
TI-2023-00536 CVE-2023-0565 · GHSA-vqqm-c9gx-773q

Business Logic Errors in froxlor/froxlor

Priority MEDIUM 58

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00562 Published 2023-01-29 Fixed in 2.0.10 CWE-840
TI-2023-00535 CVE-2023-0564 · GHSA-pm72-27mg-fc28

Weak Password Requirements in froxlor/froxlor

Priority HIGH 66

Weak Password Requirements in GitHub repository froxlor/froxlor prior to 2.0.10.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00455 Published 2023-01-29 Fixed in 2.0.10 CWE-521