CVE-2023-4304
LowCVSS 3.8Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
Business logic errors in the GitHub repository froxlor/froxlor prior to version 2.0.22 and 2.1.0 may lead to unauthorized access or improper application behavior.
Risk Assessment
Organizations using the vulnerable version may be exposed to attacks that could result in data loss or system integrity breaches.
Recommendation
It is recommended to upgrade to version 2.0.22 or 2.1.0 to mitigate these business logic errors.
Other vulnerabilities in froxlor/froxlor
See all- CVE-2023-3173Critical
Improper restriction of excessive authentication attempts exists in GitHub repository froxlor/froxlor prior to version 2.0.20.
- CVE-2023-3668High
In the GitHub repository froxlor/froxlor prior to version 2.0.21, there is improper encoding or escaping of output.
- CVE-2023-3192Medium
Session Fixation vulnerability in GitHub repository froxlor/froxlor prior to version 2.1.0.
- CVE-2023-3172High
There is a Path Traversal vulnerability in the GitHub repository froxlor/froxlor prior to version 2.0.20.
Original NVD description (English source)
Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22,2.1.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS