CVE-2023-50256

CVSS V2 None CVSS V3 None

Description

Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements (e.g. surname, company name) established by the system. Version 2.1.2 fixes this issue.

Overview

CVE ID
CVE-2023-50256

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-01-03T22:34:47.447Z

Last Modified Date
2024-01-03T22:34:47.447Z

Weakness Enumerations

CWE	URL
CWE-20	http://cwe.mitre.org/data/definitions/20.html

References

Reference URL	Reference Tags
https://github.com/Froxlor/Froxlor/security/advisories/GHSA-625g-fm5w-w7w4	x_refsource_CONFIRM
https://github.com/Froxlor/Froxlor/commit/4b1846883d4828962add91bd844596d89a9c7cac	x_refsource_MISC
https://user-images.githubusercontent.com/80028768/289675319-81ae8ebe-1308-4ee3-bedb-43cdc40da474.mp4	x_refsource_MISC

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-50256
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50256

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 18:06:03				Added to TrackCVE