GHSA-6rjv-xxgr-v57x

Froxlor vulnerable to code injection

At a glance

Published: 2022-11-05 19:00 UTC
Updated: 2024-02-16 08:14 UTC
CVE: CVE-2022-3869
CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

Code Injection in GitHub repository froxlor/froxlor prior to version 0.10.38.2. There are currently no known workarounds, please upgrade to version 0.10.38.2.

Affected packages

Package	Versions
Packagist · froxlor/froxlor	introduced 0, fixed 0.10.38.2

References

https://nvd.nist.gov/vuln/detail/CVE-2022-3869 ADVISORY
https://github.com/froxlor/froxlor/commit/3f10a4adede9df83408d60ded78b51b812a763a8 WEB
https://github.com/froxlor/froxlor WEB
https://huntr.dev/bounties/7de20f21-4a9b-445d-ae2b-15ade648900b WEB

Sources

Source	Licence
OSV.dev	CC-BY 4.0 — GitHub Advisory Database