CVE-2023-2034
1 advisory.
Packagist/froxlor/froxlor CVE-2023-2034: critical 9.1, EPSS 71.43%
froxlor/froxlor vulnerable to unrestricted upload of file with dangerous type
Action: Upgrade froxlor/froxlor to 2.0.14 or later.
composer require froxlor/froxlor:2.0.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.14 | - |
Fixed versions
| 2.0.14 |
Sources
- osv: GHSA-qwvp-g9j7-28f6
- https://nvd.nist.gov/vuln/detail/CVE-2023-2034
- https://github.com/froxlor/froxlor/commit/f36bc61fc74c85a21c8d31448198b11f96eb3bc6
- https://github.com/Froxlor/Froxlor
- https://huntr.dev/bounties/aba6beaa-570e-4523-8128-da4d8e374ef6
CVE-2023-2034 · published · modified · JSON