Vulnerabilities (CVE)

Filtered by vendor Froxlor Subscribe
Total 29 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-4304 1 Froxlor 1 Froxlor 2024-02-05 N/A 2.7 LOW
Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22,2.1.0.
CVE-2023-6069 1 Froxlor 1 Froxlor 2024-02-05 N/A 8.8 HIGH
Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0.
CVE-2023-3668 1 Froxlor 1 Froxlor 2024-02-05 N/A 7.2 HIGH
Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21.
CVE-2023-2666 1 Froxlor 1 Froxlor 2024-02-04 N/A 7.5 HIGH
Allocation of Resources Without Limits or Throttling in GitHub repository froxlor/froxlor prior to 2.0.16.
CVE-2023-3192 1 Froxlor 1 Froxlor 2024-02-04 N/A 5.4 MEDIUM
Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0.
CVE-2023-3173 1 Froxlor 1 Froxlor 2024-02-04 N/A 9.8 CRITICAL
Improper Restriction of Excessive Authentication Attempts in GitHub repository froxlor/froxlor prior to 2.0.20.
CVE-2023-3172 1 Froxlor 1 Froxlor 2024-02-04 N/A 7.2 HIGH
Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20.
CVE-2023-2034 1 Froxlor 1 Froxlor 2024-02-04 N/A 8.8 HIGH
Unrestricted Upload of File with Dangerous Type in GitHub repository froxlor/froxlor prior to 2.0.14.
CVE-2023-1307 1 Froxlor 1 Froxlor 2024-02-04 N/A 9.8 CRITICAL
Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13.
CVE-2023-0572 1 Froxlor 1 Froxlor 2024-02-04 N/A 5.3 MEDIUM
Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10.
CVE-2023-0877 1 Froxlor 1 Froxlor 2024-02-04 N/A 8.8 HIGH
Code Injection in GitHub repository froxlor/froxlor prior to 2.0.11.
CVE-2023-0315 1 Froxlor 1 Froxlor 2024-02-04 N/A 8.8 HIGH
Command Injection in GitHub repository froxlor/froxlor prior to 2.0.8.
CVE-2023-0564 1 Froxlor 1 Froxlor 2024-02-04 N/A 7.5 HIGH
Weak Password Requirements in GitHub repository froxlor/froxlor prior to 2.0.10.
CVE-2023-1033 1 Froxlor 1 Froxlor 2024-02-04 N/A 8.8 HIGH
Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 2.0.11.
CVE-2023-0566 1 Froxlor 1 Froxlor 2024-02-04 N/A 4.8 MEDIUM
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in froxlor/froxlor prior to 2.0.10.
CVE-2023-0565 1 Froxlor 1 Froxlor 2024-02-04 N/A 4.9 MEDIUM
Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10.
CVE-2022-3017 1 Froxlor 1 Froxlor 2024-02-04 N/A 6.5 MEDIUM
Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 0.10.38.
CVE-2022-3721 1 Froxlor 1 Froxlor 2024-02-04 N/A 4.6 MEDIUM
Code Injection in GitHub repository froxlor/froxlor prior to 0.10.39.
CVE-2022-3869 1 Froxlor 1 Froxlor 2024-02-04 N/A 6.1 MEDIUM
Code Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2.
CVE-2020-29653 1 Froxlor 1 Froxlor 2024-02-04 4.3 MEDIUM 6.1 MEDIUM
Froxlor through 0.10.22 does not perform validation on user input passed in the customermail GET parameter. The value of this parameter is reflected in the login webpage, allowing the injection of arbitrary HTML tags.