HighCVSS 8.8
EPSS 1.0%
Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0.
Product
froxlor/froxlor vulnerabilities
26 published CVES affecting froxlor/froxlor, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 26
- Critical
- 2
- High
- 10
- Medium
- 13
- Low
- 1
- Unscored
- 0
- CISA KEV
- 0
Latest froxlor/froxlor CVEs
Newest publication first · page 1 of 2
-
-
MediumCVSS 5.4 EPSS 0.44%
Cross-site Scripting (XSS) - Stored in GitHub repository froxlor/froxlor prior to 2.0.22.
-
MediumCVSS 4.8 EPSS 0.42%
Cross-site Scripting (XSS) - Stored in GitHub repository froxlor/froxlor prior to 2.1.0-dev1.
-
LowCVSS 2.7 EPSS 0.59%
Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22,2.1.0.
-
HighCVSS 7.2 EPSS 1.0%
Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21.
-
MediumCVSS 5.4 EPSS 0.43%
Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0.
-
HighCVSS 7.2 EPSS 1.2%
Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20.
-
CVE-2023-3173 Improper Restriction of Excessive Authentication Attempts in froxlor/froxlor
PublishedCriticalCVSS 9.8 EPSS 1.1%Improper Restriction of Excessive Authentication Attempts in GitHub repository froxlor/froxlor prior to 2.0.20.
-
HighCVSS 7.5 EPSS 0.68%
Allocation of Resources Without Limits or Throttling in GitHub repository froxlor/froxlor prior to 2.0.16.
-
HighCVSS 8.8 EPSS 71.4%
Unrestricted Upload of File with Dangerous Type in GitHub repository froxlor/froxlor prior to 2.0.14.
-
CriticalCVSS 9.8 EPSS 1.1%
Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13.
-
HighCVSS 8.8 EPSS 0.32%
Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 2.0.11.
-
HighCVSS 8.8 EPSS 3.9%
Code Injection in GitHub repository froxlor/froxlor prior to 2.0.11.
-
HighCVSS 8.8 EPSS 1.1%
Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10.
-
MediumCVSS 4.8 EPSS 0.45%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in froxlor/froxlor prior to 2.0.10.
-
MediumCVSS 4.9 EPSS 0.58%
Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10.
-
HighCVSS 7.5 EPSS 0.47%
Weak Password Requirements in GitHub repository froxlor/froxlor prior to 2.0.10.
-
MediumCVSS 5.3 EPSS 0.69%
Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10.
-
HighCVSS 8.8 EPSS 97.7% Framework module Public exploit
Command Injection in GitHub repository froxlor/froxlor prior to 2.0.8.
-
MediumCVSS 5.5 EPSS 0.75%
Path Traversal: '..\filename' in GitHub repository froxlor/froxlor prior to 2.0.0.
-
MediumCVSS 4.3 EPSS 0.69%
Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1.
-
MediumCVSS 4.3 EPSS 0.37%
Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 2.0.0-beta1.
-
MediumCVSS 5.4 EPSS 0.51%
Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1.
-
MediumCVSS 6.1 EPSS 1.8%
Code Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2.
-
MediumCVSS 4.6 EPSS 1.1%
Code Injection in GitHub repository froxlor/froxlor prior to 0.10.39.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.