{"id":"CVE-2022-4867","published":"2022-12-31T00:00:00Z","modified":"2025-04-09T15:30:05Z","title":"Cross-Site Request Forgery (CSRF) in froxlor/froxlor","vendor":"froxlor","product":"froxlor/froxlor","tier":"tail","description":{"text":"Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 2.0.0-beta1.","provenance":"source","from":"CVE.org"},"cvss":{"score":3.5,"severity":"LOW","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.0037,"percentile":0.30916,"provenance":"source"},"cwes":[{"id":"CWE-352","name":"Cross-Site Request Forgery"}],"references":[{"url":"https://huntr.dev/bounties/c91364dd-9ead-4bf3-96e6-663a017e08fa","tags":[]},{"url":"https://github.com/froxlor/froxlor/commit/f7f356e896173558248c43f4f68612f78e73a65d","tags":[]}],"priority":{"score":8.6,"factors":[{"name":"EPSS percentile","points":6.18},{"name":"CVSS severity","points":2.45}]},"vendorSlug":"froxlor","affectedVersions":[{"vendor":"froxlor","product":"froxlor/froxlor","versions":[">= unspecified, < 2.0.0-beta1"]}],"affected":[{"ecosystem":"Packagist","package":"froxlor/froxlor","vulnerableRanges":[">=2.0.0-beta0, <2.0.0-beta1"],"patched":["2.0.0-beta1"],"from":["GHSA-6gwx-gw56-qhf7"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-7531","exploited":false,"provenance":"source"}}