CVE-2022-3721
published 2022-11-04CVE-2022-3721: Code Injection in GitHub repository froxlor/froxlor prior to 0.10.39.
PriorityP422medium4.6CVSS 3.1
AVNACLPRLUIRSUCLILAN
EPSS
0.75%
50.4th percentile
Code Injection in GitHub repository froxlor/froxlor prior to 0.10.39.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| froxlor | froxlor | < 0.10.39 | 0.10.39 |
| froxlor | froxlor | >= 0 < 0.10.39 | 0.10.39 |
| froxlor | froxlor_froxlor | >= unspecified < 0.10.39 | 0.10.39 |
CVSS provenance
nvdv3.14.6MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
nvdv3.07.6HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Froxlor vulnerable to Code Injection
ghsa·2022-11-04
CVE-2022-3721 [MEDIUM] CWE-79 Froxlor vulnerable to Code Injection
Froxlor vulnerable to Code Injection
Froxlor prior to version 0.10.39 is vulnerable to Code Injection.
OSV
Froxlor vulnerable to Code Injection
osv·2022-11-04
CVE-2022-3721 [MEDIUM] Froxlor vulnerable to Code Injection
Froxlor vulnerable to Code Injection
Froxlor prior to version 0.10.39 is vulnerable to Code Injection.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/froxlor/froxlor/commit/1182453c18a83309a3470b2775c148ede740806chttps://huntr.dev/bounties/a3c506f0-5f8a-4eaa-b8cc-46fb9e35cf7ahttps://github.com/froxlor/froxlor/commit/1182453c18a83309a3470b2775c148ede740806chttps://huntr.dev/bounties/a3c506f0-5f8a-4eaa-b8cc-46fb9e35cf7ahttps://huntr.com/bounties/a3c506f0-5f8a-4eaa-b8cc-46fb9e35cf7a
2022-11-04
Published