Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-gfgb-su1s-ubaj
Vulnerability ID VCID-gfgb-su1s-ubaj
Aliases CVE-2023-3173
GHSA-chw4-88xc-79w6
Summary Improper Restriction of Excessive Authentication Attempts in GitHub repository froxlor/froxlor prior to 2.0.20.
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-307 Improper Restriction of Excessive Authentication Attempts
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00137 https://api.first.org/data/v1/epss?cve=CVE-2023-3173
epss 0.00137 https://api.first.org/data/v1/epss?cve=CVE-2023-3173
cvssv3.1_qr CRITICAL https://github.com/advisories/GHSA-chw4-88xc-79w6
cvssv3.1 9.8 https://github.com/froxlor/froxlor
generic_textual CRITICAL https://github.com/froxlor/froxlor
cvssv3 9.8 https://github.com/froxlor/froxlor/commit/464216072456efb35b4541c58e7016463dfbd9a6
cvssv3.1 9.8 https://github.com/froxlor/froxlor/commit/464216072456efb35b4541c58e7016463dfbd9a6
generic_textual CRITICAL https://github.com/froxlor/froxlor/commit/464216072456efb35b4541c58e7016463dfbd9a6
ssvc Track* https://github.com/froxlor/froxlor/commit/464216072456efb35b4541c58e7016463dfbd9a6
cvssv3 9.8 https://huntr.dev/bounties/4d715f76-950d-4251-8139-3dffea798f14
cvssv3.1 9.8 https://huntr.dev/bounties/4d715f76-950d-4251-8139-3dffea798f14
generic_textual CRITICAL https://huntr.dev/bounties/4d715f76-950d-4251-8139-3dffea798f14
ssvc Track* https://huntr.dev/bounties/4d715f76-950d-4251-8139-3dffea798f14
cvssv3.1 9.8 https://nvd.nist.gov/vuln/detail/CVE-2023-3173
generic_textual CRITICAL https://nvd.nist.gov/vuln/detail/CVE-2023-3173
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2023-3173
https://github.com/froxlor/froxlor
https://nvd.nist.gov/vuln/detail/CVE-2023-3173
464216072456efb35b4541c58e7016463dfbd9a6 https://github.com/froxlor/froxlor/commit/464216072456efb35b4541c58e7016463dfbd9a6
4d715f76-950d-4251-8139-3dffea798f14 https://huntr.dev/bounties/4d715f76-950d-4251-8139-3dffea798f14
GHSA-chw4-88xc-79w6 https://github.com/advisories/GHSA-chw4-88xc-79w6
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/froxlor/froxlor
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/froxlor/froxlor/commit/464216072456efb35b4541c58e7016463dfbd9a6
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/froxlor/froxlor/commit/464216072456efb35b4541c58e7016463dfbd9a6
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-01-06T17:11:52Z/ Found at https://github.com/froxlor/froxlor/commit/464216072456efb35b4541c58e7016463dfbd9a6
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://huntr.dev/bounties/4d715f76-950d-4251-8139-3dffea798f14
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://huntr.dev/bounties/4d715f76-950d-4251-8139-3dffea798f14
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-01-06T17:11:52Z/ Found at https://huntr.dev/bounties/4d715f76-950d-4251-8139-3dffea798f14
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2023-3173
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.335
EPSS Score 0.00137
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:30:15.041596+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2023/3xxx/CVE-2023-3173.json 38.6.0