{"id":"CVE-2023-1307","published":"2023-03-10T00:00:00Z","modified":"2025-02-28T17:06:06Z","title":"Authentication Bypass by Primary Weakness in froxlor/froxlor","vendor":"froxlor","product":"froxlor/froxlor","tier":"tail","description":{"text":"Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13.","provenance":"source","from":"CVE.org"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.01073,"percentile":0.64796,"provenance":"source"},"cwes":[{"id":"CWE-305","name":"Authentication Bypass by Primary Weakness"}],"references":[{"url":"https://huntr.dev/bounties/5fe85af4-a667-41a9-a00d-f99e07c5e2f1","tags":[]},{"url":"https://github.com/froxlor/froxlor/commit/6777fbf229200f4fd566022e186548391219ab23","tags":[]}],"priority":{"score":19.8,"factors":[{"name":"EPSS percentile","points":12.96},{"name":"CVSS severity","points":6.86}]},"vendorSlug":"froxlor","affectedVersions":[{"vendor":"froxlor","product":"froxlor/froxlor","versions":[">= unspecified, < 2.0.13"]}],"affected":[{"ecosystem":"Packagist","package":"froxlor/froxlor","vulnerableRanges":["<2.0.13"],"patched":["2.0.13"],"from":["GHSA-j83x-r9qq-9g4v"],"provenance":"source"}],"euvd":{"id":"EUVD-2023-1047","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2023-0671","published":"2023-02-04","fixed":"2.0.10","kev":false},{"cve":"CVE-2023-0877","published":"2023-02-17","fixed":"2.0.11","kev":false},{"cve":"CVE-2023-1033","published":"2023-02-25","fixed":"2.0.11","kev":false,"link":{"from":"CVE-2023-1033","to":"CVE-2023-1307","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:froxlor/froxlor","fromFixed":"2.0.11","toFixed":"2.0.13","daysApart":13}]}},{"cve":"CVE-2023-1307","published":"2023-03-10","fixed":"2.0.13","kev":false},{"cve":"CVE-2023-2034","published":"2023-04-14","fixed":"2.0.14","kev":false,"link":{"from":"CVE-2023-1307","to":"CVE-2023-2034","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:froxlor/froxlor","fromFixed":"2.0.13","toFixed":"2.0.14","daysApart":35}]}},{"cve":"CVE-2023-2666","published":"2023-05-12","fixed":"2.0.16","kev":false},{"cve":"CVE-2023-3172","published":"2023-06-09","fixed":"2.0.20","kev":false}],"package":"Packagist:froxlor/froxlor"}}