{"id":"CVE-2022-4868","published":"2022-12-31T00:00:00Z","modified":"2025-04-09T15:30:25Z","title":"Improper Authorization in froxlor/froxlor","vendor":"froxlor","product":"froxlor/froxlor","tier":"tail","description":{"text":"Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1.","provenance":"source","from":"CVE.org"},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.0066,"percentile":0.51419,"provenance":"source"},"cwes":[{"id":"CWE-285","name":"Improper Authorization"}],"references":[{"url":"https://huntr.dev/bounties/3a8f36ac-5eda-41e7-a9c4-e0f3d63e6e3b","tags":[]},{"url":"https://github.com/froxlor/froxlor/commit/0527f22dc942483430f8449e25a096bb8d683a5d","tags":[]}],"priority":{"score":14.8,"factors":[{"name":"EPSS percentile","points":10.28},{"name":"CVSS severity","points":4.55}]},"vendorSlug":"froxlor","affectedVersions":[{"vendor":"froxlor","product":"froxlor/froxlor","versions":[">= unspecified, < 2.0.0-beta1"]}],"affected":[{"ecosystem":"Packagist","package":"froxlor/froxlor","vulnerableRanges":[">=2.0.0-beta0, <2.0.0-beta1"],"patched":["2.0.0-beta1"],"from":["GHSA-w6qf-j4qr-f946"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-7757","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2022-3721","published":"2022-11-04","fixed":"0.10.39","kev":false},{"cve":"CVE-2022-4864","published":"2022-12-30","fixed":"2.0.0-beta1","kev":false},{"cve":"CVE-2022-4867","published":"2022-12-31","fixed":"2.0.0-beta1","kev":false},{"cve":"CVE-2022-4868","published":"2022-12-31","fixed":"2.0.0-beta1","kev":false},{"cve":"CVE-2023-0316","published":"2023-01-16","fixed":"2.0.0","kev":false,"link":{"from":"CVE-2022-4868","to":"CVE-2023-0316","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:froxlor/froxlor","fromFixed":"2.0.0-beta1","toFixed":"2.0.0","daysApart":16}]}},{"cve":"CVE-2023-0315","published":"2023-01-16","fixed":"2.0.8","kev":false},{"cve":"CVE-2023-0564","published":"2023-01-29","fixed":"2.0.10","kev":false}],"package":"Packagist:froxlor/froxlor"}}