{"id":"CVE-2023-0877","published":"2023-02-17T00:00:00Z","modified":"2025-03-18T16:01:15Z","title":"Code Injection in froxlor/froxlor","vendor":"froxlor","product":"froxlor/froxlor","tier":"tail","description":{"text":"Code Injection in GitHub repository froxlor/froxlor prior to 2.0.11.","provenance":"source","from":"CVE.org"},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.03928,"percentile":0.90321,"provenance":"source"},"cwes":[{"id":"CWE-94","name":"Improper Control of Generation of Code"}],"references":[{"url":"https://huntr.dev/bounties/b29cf038-06f1-4fb0-9437-08f2991f92a8","tags":[]},{"url":"https://github.com/froxlor/froxlor/commit/aa48ffca2bcaf7ae57be3b8147bb3138abdab984","tags":[]}],"priority":{"score":24.4,"factors":[{"name":"EPSS percentile","points":18.06},{"name":"CVSS severity","points":6.37}]},"vendorSlug":"froxlor","affectedVersions":[{"vendor":"froxlor","product":"froxlor/froxlor","versions":[">= unspecified, < 2.0.11"]}],"affected":[{"ecosystem":"Packagist","package":"froxlor/froxlor","vulnerableRanges":["<2.0.11"],"patched":["2.0.11"],"from":["GHSA-vp4r-h765-5mwp"],"provenance":"source"}],"euvd":{"id":"EUVD-2023-0800","exploited":false,"provenance":"source"}}