CVE-2022-3721

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.39.
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:froxlor:froxlor:*:*:*:*:*:*:*:*

History

05 Nov 2022, 02:04

Type Values Removed Values Added
CPE cpe:2.3:a:froxlor:froxlor:*:*:*:*:*:*:*:*
CWE CWE-79
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 4.6
References (CONFIRM) https://huntr.dev/bounties/a3c506f0-5f8a-4eaa-b8cc-46fb9e35cf7a - (CONFIRM) https://huntr.dev/bounties/a3c506f0-5f8a-4eaa-b8cc-46fb9e35cf7a - Permissions Required, Third Party Advisory
References (MISC) https://github.com/froxlor/froxlor/commit/1182453c18a83309a3470b2775c148ede740806c - (MISC) https://github.com/froxlor/froxlor/commit/1182453c18a83309a3470b2775c148ede740806c - Patch, Third Party Advisory

04 Nov 2022, 14:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-11-04 13:15

Updated : 2024-02-04 22:51


NVD link : CVE-2022-3721

Mitre link : CVE-2022-3721

CVE.ORG link : CVE-2022-3721


JSON object : View

Products Affected

froxlor

  • froxlor
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-94

Improper Control of Generation of Code ('Code Injection')