Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-38ph-pcue-zydu
Vulnerability ID VCID-38ph-pcue-zydu
Aliases CVE-2023-4304
GHSA-9rmf-6qgj-g3wj
Summary Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22,2.1.0.
Status Published
Exploitability 0.5
Weighted Severity 3.4
Risk 1.7
Affected and Fixed Packages Package Details
Weaknesses (5)
CWE-840 Business Logic Errors
CWE-284 Improper Access Control
CWE-862 Missing Authorization
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00236 https://api.first.org/data/v1/epss?cve=CVE-2023-4304
epss 0.00236 https://api.first.org/data/v1/epss?cve=CVE-2023-4304
epss 0.00236 https://api.first.org/data/v1/epss?cve=CVE-2023-4304
cvssv3.1_qr LOW https://github.com/advisories/GHSA-9rmf-6qgj-g3wj
cvssv3.1 3.8 https://github.com/Froxlor/Froxlor
generic_textual LOW https://github.com/Froxlor/Froxlor
cvssv3.1 3.8 https://github.com/froxlor/froxlor/commit/ce9a5f97a3edb30c7d33878765d3c014a6583597
cvssv3.1 3.8 https://github.com/froxlor/froxlor/commit/ce9a5f97a3edb30c7d33878765d3c014a6583597
generic_textual LOW https://github.com/froxlor/froxlor/commit/ce9a5f97a3edb30c7d33878765d3c014a6583597
ssvc Track https://github.com/froxlor/froxlor/commit/ce9a5f97a3edb30c7d33878765d3c014a6583597
cvssv3.1 3.8 https://huntr.dev/bounties/59fe5037-b253-4b0f-be69-1d2e4af8b4a9
cvssv3.1 3.8 https://huntr.dev/bounties/59fe5037-b253-4b0f-be69-1d2e4af8b4a9
generic_textual LOW https://huntr.dev/bounties/59fe5037-b253-4b0f-be69-1d2e4af8b4a9
ssvc Track https://huntr.dev/bounties/59fe5037-b253-4b0f-be69-1d2e4af8b4a9
cvssv3.1 3.8 https://nvd.nist.gov/vuln/detail/CVE-2023-4304
generic_textual LOW https://nvd.nist.gov/vuln/detail/CVE-2023-4304
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2023-4304
https://github.com/Froxlor/Froxlor
https://nvd.nist.gov/vuln/detail/CVE-2023-4304
59fe5037-b253-4b0f-be69-1d2e4af8b4a9 https://huntr.dev/bounties/59fe5037-b253-4b0f-be69-1d2e4af8b4a9
ce9a5f97a3edb30c7d33878765d3c014a6583597 https://github.com/froxlor/froxlor/commit/ce9a5f97a3edb30c7d33878765d3c014a6583597
GHSA-9rmf-6qgj-g3wj https://github.com/advisories/GHSA-9rmf-6qgj-g3wj
No exploits are available.
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N Found at https://github.com/Froxlor/Froxlor
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N Found at https://github.com/froxlor/froxlor/commit/ce9a5f97a3edb30c7d33878765d3c014a6583597
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N Found at https://github.com/froxlor/froxlor/commit/ce9a5f97a3edb30c7d33878765d3c014a6583597
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-04T13:04:29Z/ Found at https://github.com/froxlor/froxlor/commit/ce9a5f97a3edb30c7d33878765d3c014a6583597
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N Found at https://huntr.dev/bounties/59fe5037-b253-4b0f-be69-1d2e4af8b4a9
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N Found at https://huntr.dev/bounties/59fe5037-b253-4b0f-be69-1d2e4af8b4a9
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-04T13:04:29Z/ Found at https://huntr.dev/bounties/59fe5037-b253-4b0f-be69-1d2e4af8b4a9
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2023-4304
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.46782
EPSS Score 0.00236
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:25:17.646946+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2023/4xxx/CVE-2023-4304.json 38.6.0