Paper/Archive/CVE-2023-0877

CVE-2023-0877

froxlor froxlor/froxlor — Code Injection in froxlor/froxlor

EPSS 4%public exploit CVSS 9.1

critical.is priorityof 100

55

CVSS 9.1 (CNA)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 90.4.904 × 2018.1 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

Code Injection in GitHub repository froxlor/froxlor prior to 2.0.11.

Affected

ProductAffectedFixed inSource

froxlor/froxlorunspecified – < 2.0.112.0.11CNA

Scores by source

@huntrdev (CNA)9.1CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

refhuntr.dev/bounties/b29cf038-06f1-4fb0-9437-08f2991f92a8 refgithub.com/froxlor/froxlor/commit/aa48ffca2bcaf7ae57be3b8147bb3138abdab984