CVE-2023-3192
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
Session Fixation vulnerability in GitHub repository froxlor/froxlor prior to version 2.1.0.
Risk Assessment
An attacker could hijack a user's session, leading to unauthorized access to the account.
Recommendation
It is recommended to upgrade to version 2.1.0 or later to mitigate this vulnerability.
Other vulnerabilities in froxlor/froxlor
See all- CVE-2023-3173Critical
Improper restriction of excessive authentication attempts exists in GitHub repository froxlor/froxlor prior to version 2.0.20.
- CVE-2023-4304Low
Business logic errors in the GitHub repository froxlor/froxlor prior to version 2.0.22 and 2.1.0 may lead to unauthorized access or improper application behavior.
- CVE-2023-3668High
In the GitHub repository froxlor/froxlor prior to version 2.0.21, there is improper encoding or escaping of output.
- CVE-2023-3172High
There is a Path Traversal vulnerability in the GitHub repository froxlor/froxlor prior to version 2.0.20.
Original NVD description (English source)
Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0.