CVE-2023-50256CWE-20

Froxlor username/surname AND company field Bypass

High · published January 3, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
53.3
In the wild
Unconfirmed
What it is

Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements (e.g. surname, company name) established by the system. Version 2.1.2 fixes this issue.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00716 · 53.3th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2024-01-03T22:34Z
EPSS history
Timeline
  • 03 JAN 22:34Z
    Froxlor username/surname AND company field Bypass
    cvelistv5