CVE-2023-4304

LOW EPSS 37.6%
Published Aug 11, 20232y ago · Modified Jun 17, 20262w ago
2.7 CVSS 3.1
Low
Find Similar
Published Aug 11, 2023 2y ago
Last Modified Jun 17, 2026 2w ago

Description

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22,2.1.0.

CVSS Details

Base Score
2.7
Exploitability
1.2
Impact
1.4
Vector string
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required High
User Interaction None
Scope Unchanged
Confidentiality None
Integrity Low
Availability None

Threat Intelligence

EPSS Exploit Probability
37.6% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-840

Affected Products 1

VendorProductVersionRange
froxlorfroxlor* <2.0.22

References 2

  • github.com https://github.com/froxlor/froxlor/commit/ce9a5f97a3edb30c7d33878765d3c014a6583597
    Patch
  • huntr.dev https://huntr.dev/bounties/59fe5037-b253-4b0f-be69-1d2e4af8b4a9
    ExploitIssue TrackingPatchThird Party Advisory

Remediation

  • github.com https://github.com/froxlor/froxlor/commit/ce9a5f97a3edb30c7d33878765d3c014a6583597
    Patch
  • huntr.dev https://huntr.dev/bounties/59fe5037-b253-4b0f-be69-1d2e4af8b4a9
    ExploitIssue TrackingPatchThird Party Advisory