Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-8c8t-7j1p-3baa
Vulnerability ID VCID-8c8t-7j1p-3baa
Aliases CVE-2022-4867
GHSA-6gwx-gw56-qhf7
Summary Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 2.0.0-beta1.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-352 Cross-Site Request Forgery (CSRF)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00155 https://api.first.org/data/v1/epss?cve=CVE-2022-4867
epss 0.00155 https://api.first.org/data/v1/epss?cve=CVE-2022-4867
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-6gwx-gw56-qhf7
cvssv3.1 4.3 https://github.com/froxlor/froxlor
generic_textual MODERATE https://github.com/froxlor/froxlor
cvssv3 3.5 https://github.com/froxlor/froxlor/commit/f7f356e896173558248c43f4f68612f78e73a65d
cvssv3.1 4.3 https://github.com/froxlor/froxlor/commit/f7f356e896173558248c43f4f68612f78e73a65d
generic_textual MODERATE https://github.com/froxlor/froxlor/commit/f7f356e896173558248c43f4f68612f78e73a65d
ssvc Track https://github.com/froxlor/froxlor/commit/f7f356e896173558248c43f4f68612f78e73a65d
cvssv3 3.5 https://huntr.dev/bounties/c91364dd-9ead-4bf3-96e6-663a017e08fa
cvssv3.1 4.3 https://huntr.dev/bounties/c91364dd-9ead-4bf3-96e6-663a017e08fa
generic_textual MODERATE https://huntr.dev/bounties/c91364dd-9ead-4bf3-96e6-663a017e08fa
ssvc Track https://huntr.dev/bounties/c91364dd-9ead-4bf3-96e6-663a017e08fa
cvssv3.1 4.3 https://nvd.nist.gov/vuln/detail/CVE-2022-4867
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2022-4867
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2022-4867
https://github.com/froxlor/froxlor
https://nvd.nist.gov/vuln/detail/CVE-2022-4867
c91364dd-9ead-4bf3-96e6-663a017e08fa https://huntr.dev/bounties/c91364dd-9ead-4bf3-96e6-663a017e08fa
f7f356e896173558248c43f4f68612f78e73a65d https://github.com/froxlor/froxlor/commit/f7f356e896173558248c43f4f68612f78e73a65d
GHSA-6gwx-gw56-qhf7 https://github.com/advisories/GHSA-6gwx-gw56-qhf7
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Found at https://github.com/froxlor/froxlor
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N Found at https://github.com/froxlor/froxlor/commit/f7f356e896173558248c43f4f68612f78e73a65d
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Found at https://github.com/froxlor/froxlor/commit/f7f356e896173558248c43f4f68612f78e73a65d
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T14:43:03Z/ Found at https://github.com/froxlor/froxlor/commit/f7f356e896173558248c43f4f68612f78e73a65d
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N Found at https://huntr.dev/bounties/c91364dd-9ead-4bf3-96e6-663a017e08fa
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Found at https://huntr.dev/bounties/c91364dd-9ead-4bf3-96e6-663a017e08fa
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T14:43:03Z/ Found at https://huntr.dev/bounties/c91364dd-9ead-4bf3-96e6-663a017e08fa
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2022-4867
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.35968
EPSS Score 0.00155
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:38:55.147247+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2022/4xxx/CVE-2022-4867.json 38.6.0