CVE-2023-3172
HighCVSS 7.2Exploitation Probability (EPSS)
Elevated risk65th percentile - higher than 65% of all known CVEs
Summary
There is a Path Traversal vulnerability in the GitHub repository froxlor/froxlor prior to version 2.0.20.
Risk Assessment
An attacker could gain access to system files, potentially leading to the exposure of sensitive data.
Recommendation
It is recommended to upgrade to version 2.0.20 or later to mitigate this vulnerability.
Other vulnerabilities in froxlor/froxlor
See all- CVE-2023-3173Critical
Improper restriction of excessive authentication attempts exists in GitHub repository froxlor/froxlor prior to version 2.0.20.
- CVE-2023-4304Low
Business logic errors in the GitHub repository froxlor/froxlor prior to version 2.0.22 and 2.1.0 may lead to unauthorized access or improper application behavior.
- CVE-2023-3668High
In the GitHub repository froxlor/froxlor prior to version 2.0.21, there is improper encoding or escaping of output.
- CVE-2023-3192Medium
Session Fixation vulnerability in GitHub repository froxlor/froxlor prior to version 2.1.0.
Original NVD description (English source)
Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20.