GHSA-4gm9-c9jq-g523
Suggest an improvement- Source
- https://github.com/advisories/GHSA-4gm9-c9jq-g523
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/05/GHSA-4gm9-c9jq-g523/GHSA-4gm9-c9jq-g523.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-4gm9-c9jq-g523
- Aliases
- Published
- 2023-05-19T18:30:25Z
- Modified
- 2024-02-16T08:16:00.474389Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- Froxlor vulnerable to Allocation of Resources Without Limits or Throttling
- Details
-
Froxlor prior to 2.0.16 has a password reset page with no rate limit.
- Database specific
{ "nvd_published_at": "2023-05-12T01:15:09Z", "cwe_ids": [ "CWE-770" ], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2023-05-19T23:46:03Z" }- References
Affected packages
Packagist / froxlor/froxlor
Package
- Name
- froxlor/froxlor
- Purl
- pkg:composer/froxlor/froxlor
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.0.16
Affected versions
0.*
0.10.0-rc1
0.10.0-rc2
0.10.0
0.10.1
0.10.2
0.10.3
0.10.4
0.10.5
0.10.6
0.10.7
0.10.8
0.10.9
0.10.10
0.10.11
0.10.12
0.10.13
0.10.14
0.10.15
0.10.16
0.10.17
0.10.18
0.10.19
0.10.20
0.10.21
0.10.22
0.10.23
0.10.23.1
0.10.24
0.10.25
0.10.26
0.10.27
0.10.28
0.10.29
0.10.29.1
0.10.30
0.10.31
0.10.32
0.10.33
0.10.34
0.10.34.1
0.10.35
0.10.35.1
0.10.36
0.10.37
0.10.38
0.10.38.1
0.10.38.2
0.10.38.3
2.*
2.0.0
2.0.1
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.10
2.0.11
2.0.12
2.0.13
2.0.14
2.0.15