CVE-2020-10235
1 advisory.
Packagist/froxlor/froxlor CVE-2020-10235: high 8.8
Froxlor arbitrary code execution via the database configuration options
Action: Upgrade froxlor/froxlor to 0.10.14 or later.
composer require froxlor/froxlor:0.10.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.10.14 | - |
Fixed versions
| 0.10.14 |
Sources
- osv: GHSA-p29c-jpgj-v57r
- https://nvd.nist.gov/vuln/detail/CVE-2020-10235
- https://github.com/Froxlor/Froxlor/commit/62ce21c9ec393f9962515c88f0c489ace42bf656
- https://github.com/Froxlor/Froxlor/commit/7e361274c5bf687b6a42dd1871f6d75506c5d207
- https://bugzilla.suse.com/show_bug.cgi?id=1165721
- https://github.com/Froxlor/Froxlor
- https://github.com/Froxlor/Froxlor/compare/0.10.13...0.10.14
CVE-2020-10235 · published · modified · JSON