{"action":"Upgrade froxlor/froxlor to 2.2.0 or later.","affected":[{"fixed":"2.2.0","introduced":"0"}],"component":"froxlor/froxlor","cve_ids":["CVE-2024-58383"],"ecosystem":"Packagist","epss":0.00155,"exploited":false,"fixed_versions":["2.2.0"],"ghsa_id":"GHSA-34qg-65m4-f23m","id":"tcs_01M5KESK4FHXQPYAYVQXC4T8SN","modified_at":"2026-09-15T03:56:00.208637551Z","published_at":"2024-08-23T18:54:30Z","references":["https://osv.dev/vulnerability/GHSA-34qg-65m4-f23m","https://github.com/froxlor/Froxlor/security/advisories/GHSA-34qg-65m4-f23m","https://github.com/froxlor/Froxlor/commit/5d2ce4ecfb0e9c397ef5c73b107fb9a0e122e910","https://github.com/froxlor/Froxlor","https://github.com/froxlor/Froxlor/blob/2.1.9/lib/configfiles/bookworm.xml#L3075"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-34qg-65m4-f23m","url":"https://osv.dev/vulnerability/GHSA-34qg-65m4-f23m"}],"summary":"Froxlor: /etc/pure-ftpd/db/mysql.conf is chmod 644 but contains <SQL_UNPRIVILEGED_PASSWORD>"}