medium4.6
CVE-2022-3721
Froxlor vulnerable to Code Injection
Impact
Froxlor prior to version 0.10.39 is vulnerable to Code Injection.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | froxlor/froxlor | < 0.10.39 | 0.10.39 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Froxlor | Froxlor | before 0.10.39 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/froxlor/froxlor/commit/1182453c18a83309a3470b2775c148ede740806c
- https://huntr.dev/bounties/a3c506f0-5f8a-4eaa-b8cc-46fb9e35cf7a
- https://huntr.com/bounties/a3c506f0-5f8a-4eaa-b8cc-46fb9e35cf7a
- https://github.com/advisories/GHSA-h95w-p3x6-wwj6
- https://nvd.nist.gov/vuln/detail/CVE-2022-3721