CVE-2023-0671

HIGH8.8EPSS 0.51%

froxlor is vulnerable to privilege escalation from customer to root via directory-options

Published: 2/4/2023Modified: 11/8/2023
Also known as:GHSA-9fqc-9cpr-w73q

Description

Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1HIGH8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References (4)