CVE-2022-4868
MEDIUMGitHub froxlor/froxlor <2.0.0-beta1 - Info Disclosure
Title source: llmDescription
Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1.
References (2)
Core 2
Core References
Patch, Third Party Advisory
https://github.com/froxlor/froxlor/commit/0527f22dc942483430f8449e25a096bb8d683a5d
Exploit, Patch, Third Party Advisory
https://huntr.dev/bounties/3a8f36ac-5eda-41e7-a9c4-e0f3d63e6e3b
Scores
CVSS v3
4.3
EPSS
0.0017
EPSS Percentile
38.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-285
Status
published
Products (2)
froxlor/froxlor
< 0.10.38.3
froxlor/froxlor
2.0.0-beta0 - 2.0.0-beta1Packagist
Published
Dec 31, 2022
Tracked Since
Feb 18, 2026