CVE-2023-0315

Command Injection in froxlor/froxlor

Command Injection in GitHub repository froxlor/froxlor prior to 2.0.8.

Affected

froxlor · froxlor/froxlor

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.0 HUNTR

7.2 HIGHCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

97.65% chance of exploitation in the next 30 days, 100th percentile

Published

2023-01-16

Updated

2025-04-07

Proof-of-concept exploits (2)

• https://huntr.dev/bounties/ff4e177b-ba48-4913-bbfa-ab8ce0db5943
• mhaskar/CVE-2023-03157★ · 2023-01-29

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/froxlor_log_path_rce…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/51263

Security advisories

• froxlor/froxlor/commit/090cfc26f2722ac3036cc7fd1861955bc36f065a
• advisories/GHSA-cp68-42pf-6627

References

• CVE Record
• NVD entry

Related

• CVE-2018-20434
• CVE-2019-13024
• CVE-2019-15029
• CVE-2019-16662
• CVE-2019-16663
• CVE-2019-20224