CVE-2023-0877
Assigner: @huntrdev
Published: 2023-02-17T00:00:00
State: PUBLISHED
title:  Code Injection in froxlor/froxlor
descriptions: value: Code Injection in GitHub repository froxlor/froxlor prior to 2.0.11.
affected: vendor: froxlor
product: froxlor/froxlor
versions: version: unspecified
lessThan: 2.0.11
status: affected
versionType: custom
metrics: cvssV3_0: version: 3.0
vectorString: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 9.1
baseSeverity: CRITICAL
problemTypes: descriptions: type: CWE
description: CWE-94 Improper Control of Generation of Code
cweId: CWE-94
source: advisory: b29cf038-06f1-4fb0-9437-08f2991f92a8
discovery: EXTERNAL