high7.5
CVE-2023-2666
Froxlor vulnerable to Allocation of Resources Without Limits or Throttling
Impact
Froxlor prior to 2.0.16 has a password reset page with no rate limit.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | froxlor/froxlor | < 2.0.16 | 2.0.16 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Froxlor | Froxlor | before 2.0.16 |