CVE-2023-0315

Command Injection in GitHub repository froxlor/froxlor prior to 2.0.8.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.0

7.2 HIGHCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

97.65% chance of exploitation in the next 30 days, 100th percentile

Published

2023-01-16

Updated

2025-04-07

Proof-of-concept exploits (2)

• https://huntr.dev/bounties/ff4e177b-ba48-4913-bbfa-ab8ce0db5943
• mhaskar/CVE-2023-03157★ · 2023-01-29

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/froxlor_log_path_rce.…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/51263

References

• CVE Record
• NVD entry

Related

• CVE-2018-20434
• CVE-2019-13024
• CVE-2019-15029
• CVE-2019-16662
• CVE-2019-16663
• CVE-2019-20224