GHSA-h95w-p3x6-wwj6
Suggest an improvement- Source
- https://github.com/advisories/GHSA-h95w-p3x6-wwj6
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/11/GHSA-h95w-p3x6-wwj6/GHSA-h95w-p3x6-wwj6.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-h95w-p3x6-wwj6
- Aliases
- Published
- 2022-11-04T19:01:16Z
- Modified
- 2025-05-02T22:04:45Z
- Severity
-
- 4.6 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N CVSS Calculator
- Summary
- Froxlor vulnerable to Code Injection
- Details
-
Froxlor prior to version 0.10.39 is vulnerable to Code Injection.
- Database specific
{ "cwe_ids": [ "CWE-79", "CWE-94" ], "github_reviewed": true, "github_reviewed_at": "2022-11-04T20:54:01Z", "nvd_published_at": "2022-11-04T13:15:00Z", "severity": "MODERATE" }- References
Affected packages
Packagist / froxlor/froxlor
Package
- Name
- froxlor/froxlor
- Purl
- pkg:composer/froxlor/froxlor
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed0.10.39
Affected versions
0.*
0.10.0-rc1
0.10.0-rc2
0.10.0
0.10.1
0.10.2
0.10.3
0.10.4
0.10.5
0.10.6
0.10.7
0.10.8
0.10.9
0.10.10
0.10.11
0.10.12
0.10.13
0.10.14
0.10.15
0.10.16
0.10.17
0.10.18
0.10.19
0.10.20
0.10.21
0.10.22
0.10.23
0.10.23.1
0.10.24
0.10.25
0.10.26
0.10.27
0.10.28
0.10.29
0.10.29.1
0.10.30
0.10.31
0.10.32
0.10.33
0.10.34
0.10.34.1
0.10.35
0.10.35.1
0.10.36
0.10.37
0.10.38
0.10.38.1
0.10.38.2
0.10.38.3