Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-13gb-yr6z-n7cc
Vulnerability ID VCID-13gb-yr6z-n7cc
Aliases CVE-2023-0877
GHSA-vp4r-h765-5mwp
Summary Code Injection in GitHub repository froxlor/froxlor prior to 2.0.11.
Status Published
Exploitability 0.5
Weighted Severity 8.2
Risk 4.1
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-94 Improper Control of Generation of Code ('Code Injection')
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00457 https://api.first.org/data/v1/epss?cve=CVE-2023-0877
epss 0.00457 https://api.first.org/data/v1/epss?cve=CVE-2023-0877
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-vp4r-h765-5mwp
cvssv3.1 8.8 https://github.com/Froxlor/Froxlor
generic_textual HIGH https://github.com/Froxlor/Froxlor
cvssv3 9.1 https://github.com/froxlor/froxlor/commit/aa48ffca2bcaf7ae57be3b8147bb3138abdab984
cvssv3.1 8.8 https://github.com/froxlor/froxlor/commit/aa48ffca2bcaf7ae57be3b8147bb3138abdab984
generic_textual HIGH https://github.com/froxlor/froxlor/commit/aa48ffca2bcaf7ae57be3b8147bb3138abdab984
ssvc Track* https://github.com/froxlor/froxlor/commit/aa48ffca2bcaf7ae57be3b8147bb3138abdab984
cvssv3 9.1 https://huntr.dev/bounties/b29cf038-06f1-4fb0-9437-08f2991f92a8
cvssv3.1 8.8 https://huntr.dev/bounties/b29cf038-06f1-4fb0-9437-08f2991f92a8
generic_textual HIGH https://huntr.dev/bounties/b29cf038-06f1-4fb0-9437-08f2991f92a8
ssvc Track* https://huntr.dev/bounties/b29cf038-06f1-4fb0-9437-08f2991f92a8
cvssv3.1 8.8 https://nvd.nist.gov/vuln/detail/CVE-2023-0877
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2023-0877
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2023-0877
https://github.com/Froxlor/Froxlor
https://nvd.nist.gov/vuln/detail/CVE-2023-0877
aa48ffca2bcaf7ae57be3b8147bb3138abdab984 https://github.com/froxlor/froxlor/commit/aa48ffca2bcaf7ae57be3b8147bb3138abdab984
b29cf038-06f1-4fb0-9437-08f2991f92a8 https://huntr.dev/bounties/b29cf038-06f1-4fb0-9437-08f2991f92a8
GHSA-vp4r-h765-5mwp https://github.com/advisories/GHSA-vp4r-h765-5mwp
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/Froxlor/Froxlor
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H Found at https://github.com/froxlor/froxlor/commit/aa48ffca2bcaf7ae57be3b8147bb3138abdab984
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/froxlor/froxlor/commit/aa48ffca2bcaf7ae57be3b8147bb3138abdab984
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-03-18T16:01:03Z/ Found at https://github.com/froxlor/froxlor/commit/aa48ffca2bcaf7ae57be3b8147bb3138abdab984
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H Found at https://huntr.dev/bounties/b29cf038-06f1-4fb0-9437-08f2991f92a8
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://huntr.dev/bounties/b29cf038-06f1-4fb0-9437-08f2991f92a8
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-03-18T16:01:03Z/ Found at https://huntr.dev/bounties/b29cf038-06f1-4fb0-9437-08f2991f92a8
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2023-0877
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.64348
EPSS Score 0.00457
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:28:46.877326+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2023/0xxx/CVE-2023-0877.json 38.6.0