CVE-2023-1307 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	9.8 CRITICAL	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
@huntrdev	CNA	9.8 CRITICAL	NETWORK	LOW	NONE	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE	ADP	---				---
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 17%

Vendor	Product	Version
froxlor	froxlor	𝑥 < 2.0.13

𝑥

= Vulnerable software versions

Known Exploits!

Common Weakness Enumeration

CWE-305 - Authentication Bypass by Primary Weakness
The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.

References

https://github.com/froxlor/froxlor/commit/6777fbf229200f4fd566022e186548391219ab23

https://huntr.dev/bounties/5fe85af4-a667-41a9-a00d-f99e07c5e2f1

https://github.com/froxlor/froxlor/commit/6777fbf229200f4fd566022e186548391219ab23

https://huntr.dev/bounties/5fe85af4-a667-41a9-a00d-f99e07c5e2f1