Vulnerabilidades em froxlor
77 resultadosAnálise Vexday
Froxlor apresenta 41 vulnerabilidades catalogadas, com 11 em nível crítico e 10 divulgadas nos últimos 90 dias, indicando cadência preocupante de descobertas recentes. A fraqueza dominante é XSS (CWE-79), típica de aplicações web, mas nenhuma vulnerabilidade está em exploração ativa conhecida no momento. O volume recente de críticas demanda atenção prioritária em ciclos de atualização.
CVE-2026-41233MEDIUMFroxlor has a Reseller Domain Quota Bypass via Unvalidated adminid Parameter in Domains.add()EPSS 0.3%CVE-2026-55593MEDIUMFroxlor: CSRF Vulnerability in Froxlor AJAX Endpoint — Missing Cross-Site Request Forgery ProtectionEPSS 0.3%CVE-2026-109963MEDIUMFroxlor before 2.3.14 IDOR in Email Template Editor via admin_templates.phpEPSS 0.3%CVE-2026-109962MEDIUMFroxlor 0.10.0 before 2.3.14 Missing Authorization in MysqlServer and Cronjobs APIEPSS 0.3%CVE-2026-100710MEDIUMFroxlor before 2.3.12 DKIM Private Key Disclosure via APIEPSS 0.2%CVE-2026-100719HIGHFroxlor before 2.3.12 Credential Disclosure via DirProtections APIEPSS 0.2%CVE-2026-41232MEDIUMFroxlor has an Email Sender Alias Domain Ownership Bypass via Wrong Array Index that Allows Cross-Customer Email SpoofingEPSS 0.2%CVE-2026-41235HIGHFroxlor has an authorization bypass in FTP shell assignment via missing server-side `available_shells` enforcementEPSS 0.2%CVE-2026-109961HIGHFroxlor 0.10.0 before 2.3.14 Newline Injection via Ftps.add additional_membersEPSS 0.2%CVE-2026-100720CRITICALFroxlor before 2.3.12 Stored XSS via SSL certificate issuerEPSS 0.2%CVE-2026-100718HIGHFroxlor before 2.3.12 Authentication Bypass via EmailSender.addEPSS 0.2%CVE-2026-121435MEDIUMFroxlor before 2.3.15 Authorization Bypass via Mysqls.add APIEPSS 0.2%CVE-2026-100708HIGHFroxlor before 2.3.13 Private Key Disclosure via Certificates APIEPSS 0.2%CVE-2026-121434MEDIUMFroxlor 2.3.0 before 2.3.15 Authorization Bypass via Certificates.update APIEPSS 0.2%CVE-2026-100713HIGHFroxlor before 2.3.12 Privilege Escalation via SSH Key SyncEPSS 0.2%CVE-2024-58383HIGHFroxlor before 2.2.0 Insecure File Permissions mysql.confEPSS 0.2%CVE-2026-100712HIGHfroxlor before 2.3.12 Two-Factor Authentication Bypass via CSRFEPSS 0.1%