{"id":"CVE-2023-4304","published":"2023-08-11T00:00:20Z","modified":"2024-10-04T13:06:39Z","title":"Business Logic Errors in froxlor/froxlor","vendor":"froxlor","product":"froxlor/froxlor","tier":"tail","description":{"text":"Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22,2.1.0.\n\n","provenance":"source","from":"CVE.org"},"cvss":{"score":3.8,"severity":"LOW","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.00591,"percentile":0.48287,"provenance":"source"},"cwes":[{"id":"CWE-840","name":"Business Logic Errors"}],"references":[{"url":"https://huntr.dev/bounties/59fe5037-b253-4b0f-be69-1d2e4af8b4a9","tags":[]},{"url":"https://github.com/froxlor/froxlor/commit/ce9a5f97a3edb30c7d33878765d3c014a6583597","tags":[]}],"priority":{"score":12.3,"factors":[{"name":"EPSS percentile","points":9.66},{"name":"CVSS severity","points":2.66}]},"vendorSlug":"froxlor","affectedVersions":[{"vendor":"froxlor","product":"froxlor/froxlor","versions":[">= unspecified, < 2.0.22,2.1.0"]}],"affected":[{"ecosystem":"Packagist","package":"froxlor/froxlor","vulnerableRanges":["<2.0.22"],"patched":["2.0.22"],"from":["GHSA-9rmf-6qgj-g3wj"],"provenance":"source"}],"euvd":{"id":"EUVD-2023-2261","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2023-3172","published":"2023-06-09","fixed":"2.0.20","kev":false},{"cve":"CVE-2023-3173","published":"2023-06-09","fixed":"2.0.20","kev":false},{"cve":"CVE-2023-3668","published":"2023-07-14","fixed":"2.0.21","kev":false,"link":{"from":"CVE-2023-3668","to":"CVE-2023-4304","relation":"successor","confidence":"medium","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:froxlor/froxlor","fromFixed":"2.0.21","toFixed":"2.0.22","daysApart":28},{"kind":"similar","provenance":"machine","score":0.39,"basis":"same product + description similarity"}]}},{"cve":"CVE-2023-4304","published":"2023-08-11","fixed":"2.0.22","kev":false},{"cve":"CVE-2023-4829","published":"2023-10-13","fixed":"2.0.22","kev":false},{"cve":"CVE-2023-6069","published":"2023-11-10","fixed":"2.1.0-beta1","kev":false},{"cve":"CVE-2023-5564","published":"2023-10-13","fixed":"2.1.0-dev1","kev":false}],"package":"Packagist:froxlor/froxlor"}}