GitHub Advisoryadvisory · Packagist

GHSA-3v7m-2jrh-vc93 Froxlor vulnerable to Argument Injection

MEDIUM Published 2022-12-31 Modified 2023-01-10 Official page ↗
Aliases
CVE-2022-4864
Ecosystem
Packagist
Packages
froxlor/froxlor
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-74, CWE-88
Reviewed
2023-01-03

Affected packages

• Packagist froxlor/froxlor: >= 2.0.0-beta0, < 2.0.0-beta1 → fixed in 2.0.0-beta1

Description

Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1.

Related

Alias · CVE (1)

  • CVE-2022-4864 Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1. vulnerability

Weakness · CWE (2)

  • CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness
  • CWE-88 Improper Neutralization of Argument Delimiters in a Command weakness

References