{"action":"Upgrade froxlor/froxlor to 2.2.6 or later.","affected":[{"fixed":"2.2.6","introduced":"0"}],"component":"froxlor/froxlor","cve_ids":["CVE-2025-29773"],"ecosystem":"Packagist","epss":0.00289,"exploited":false,"fixed_versions":["2.2.6"],"ghsa_id":"GHSA-7j6w-p859-464f","id":"tcs_01M5KEY5R56GZNSZ7GZP4TWBT5","modified_at":"2026-09-10T03:49:48.417105501Z","published_at":"2025-03-11T20:30:35Z","references":["https://osv.dev/vulnerability/GHSA-7j6w-p859-464f","https://github.com/froxlor/Froxlor/security/advisories/GHSA-7j6w-p859-464f","https://nvd.nist.gov/vuln/detail/CVE-2025-29773","https://github.com/froxlor/Froxlor/commit/a43d53d54034805e3e404702a01312fa0c40b623","https://github.com/froxlor/Froxlor","https://mega.nz/file/h8oFHQrL#I4V02_BWee4CCx7OoBl_2Ufkd5Wc7fvs5aCatGApkoQ"],"severity":{"label":"medium","score":5.8},"sources":[{"source":"osv","source_id":"GHSA-7j6w-p859-464f","url":"https://osv.dev/vulnerability/GHSA-7j6w-p859-464f"}],"summary":"Froxlor allows Multiple Accounts to Share the Same Email Address Leading to Potential Privilege Escalation or Account Takeover"}