{"id":"CVE-2023-1033","published":"2023-02-25T00:00:00Z","modified":"2025-03-11T15:37:34Z","title":"Cross-Site Request Forgery (CSRF) in froxlor/froxlor","vendor":"froxlor","product":"froxlor/froxlor","tier":"tail","description":{"text":"Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 2.0.11.","provenance":"source","from":"CVE.org"},"cvss":{"score":6.8,"severity":"MEDIUM","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.00324,"percentile":0.25333,"provenance":"source"},"cwes":[{"id":"CWE-352","name":"Cross-Site Request Forgery"}],"references":[{"url":"https://huntr.dev/bounties/ba3cd929-8b60-4d8d-b77d-f28409ecf387","tags":[]},{"url":"https://github.com/froxlor/froxlor/commit/4003a8d2b60728a77476d1d4f5aa5c635f128950","tags":[]}],"priority":{"score":9.8,"factors":[{"name":"EPSS percentile","points":5.07},{"name":"CVSS severity","points":4.76}]},"vendorSlug":"froxlor","affectedVersions":[{"vendor":"froxlor","product":"froxlor/froxlor","versions":[">= unspecified, < 2.0.11"]}],"affected":[{"ecosystem":"Packagist","package":"froxlor/froxlor","vulnerableRanges":["<2.0.11"],"patched":["2.0.11"],"from":["GHSA-p7qq-rrvw-x55x"],"provenance":"source"}],"euvd":{"id":"EUVD-2023-0754","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2023-0572","published":"2023-01-29","fixed":"2.0.10","kev":false},{"cve":"CVE-2023-0671","published":"2023-02-04","fixed":"2.0.10","kev":false},{"cve":"CVE-2023-0877","published":"2023-02-17","fixed":"2.0.11","kev":false},{"cve":"CVE-2023-1033","published":"2023-02-25","fixed":"2.0.11","kev":false},{"cve":"CVE-2023-1307","published":"2023-03-10","fixed":"2.0.13","kev":false,"link":{"from":"CVE-2023-1033","to":"CVE-2023-1307","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:froxlor/froxlor","fromFixed":"2.0.11","toFixed":"2.0.13","daysApart":13}]}},{"cve":"CVE-2023-2034","published":"2023-04-14","fixed":"2.0.14","kev":false},{"cve":"CVE-2023-2666","published":"2023-05-12","fixed":"2.0.16","kev":false}],"package":"Packagist:froxlor/froxlor"}}