CVE-2023-4304

Business Logic Errors in froxlor/froxlor

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22,2.1.0.

Affected

froxlor · froxlor/froxlor

CVSS v3.1 NVD

2.7 LOWCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

CVSS v3.1 HUNTR

3.8 LOWCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

CVSS v3.0 GitHub

3.8 LOWCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

EPSS

0.59% chance of exploitation in the next 30 days, 47th percentile

Published

2023-08-11

Updated

2024-10-04

Proof-of-concept exploits (1)

• https://huntr.dev/bounties/59fe5037-b253-4b0f-be69-1d2e4af8b4a9

Security advisories

• advisories/GHSA-9rmf-6qgj-g3wj
• froxlor/froxlor/commit/ce9a5f97a3edb30c7d33878765d3c014a6583597

References

• CVE Record
• NVD entry