Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements (e.g. surname, company name) established by the system. Version 2.1.2 fixes this issue.
References
Configurations
History
10 Jan 2024, 20:00
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CPE | cpe:2.3:a:froxlor:froxlor:*:*:*:*:*:*:*:* | |
| References | () https://github.com/Froxlor/Froxlor/commit/4b1846883d4828962add91bd844596d89a9c7cac - Patch | |
| References | () https://github.com/Froxlor/Froxlor/security/advisories/GHSA-625g-fm5w-w7w4 - Exploit, Vendor Advisory | |
| References | () https://user-images.githubusercontent.com/80028768/289675319-81ae8ebe-1308-4ee3-bedb-43cdc40da474.mp4 - Exploit | |
| First Time |
Froxlor
Froxlor froxlor |
03 Jan 2024, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-03 23:15
Updated : 2024-01-10 20:00
NVD link : CVE-2023-50256
Mitre link : CVE-2023-50256
JSON object : View
Products Affected
froxlor
- froxlor
CWE