Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-gyny-xdxc-vyg7
Vulnerability ID VCID-gyny-xdxc-vyg7
Aliases CVE-2022-4868
GHSA-w6qf-j4qr-f946
Summary Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-285 Improper Authorization
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00171 https://api.first.org/data/v1/epss?cve=CVE-2022-4868
epss 0.00171 https://api.first.org/data/v1/epss?cve=CVE-2022-4868
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-w6qf-j4qr-f946
cvssv3.1 4.3 https://github.com/froxlor/froxlor
generic_textual MODERATE https://github.com/froxlor/froxlor
cvssv3 6.5 https://github.com/froxlor/froxlor/commit/0527f22dc942483430f8449e25a096bb8d683a5d
cvssv3.1 4.3 https://github.com/froxlor/froxlor/commit/0527f22dc942483430f8449e25a096bb8d683a5d
generic_textual MODERATE https://github.com/froxlor/froxlor/commit/0527f22dc942483430f8449e25a096bb8d683a5d
ssvc Track https://github.com/froxlor/froxlor/commit/0527f22dc942483430f8449e25a096bb8d683a5d
cvssv3 6.5 https://huntr.dev/bounties/3a8f36ac-5eda-41e7-a9c4-e0f3d63e6e3b
cvssv3.1 4.3 https://huntr.dev/bounties/3a8f36ac-5eda-41e7-a9c4-e0f3d63e6e3b
generic_textual MODERATE https://huntr.dev/bounties/3a8f36ac-5eda-41e7-a9c4-e0f3d63e6e3b
ssvc Track https://huntr.dev/bounties/3a8f36ac-5eda-41e7-a9c4-e0f3d63e6e3b
cvssv3.1 4.3 https://nvd.nist.gov/vuln/detail/CVE-2022-4868
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2022-4868
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2022-4868
https://github.com/froxlor/froxlor
https://nvd.nist.gov/vuln/detail/CVE-2022-4868
0527f22dc942483430f8449e25a096bb8d683a5d https://github.com/froxlor/froxlor/commit/0527f22dc942483430f8449e25a096bb8d683a5d
3a8f36ac-5eda-41e7-a9c4-e0f3d63e6e3b https://huntr.dev/bounties/3a8f36ac-5eda-41e7-a9c4-e0f3d63e6e3b
GHSA-w6qf-j4qr-f946 https://github.com/advisories/GHSA-w6qf-j4qr-f946
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/froxlor/froxlor
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/froxlor/froxlor/commit/0527f22dc942483430f8449e25a096bb8d683a5d
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/froxlor/froxlor/commit/0527f22dc942483430f8449e25a096bb8d683a5d
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T14:35:21Z/ Found at https://github.com/froxlor/froxlor/commit/0527f22dc942483430f8449e25a096bb8d683a5d
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Found at https://huntr.dev/bounties/3a8f36ac-5eda-41e7-a9c4-e0f3d63e6e3b
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://huntr.dev/bounties/3a8f36ac-5eda-41e7-a9c4-e0f3d63e6e3b
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T14:35:21Z/ Found at https://huntr.dev/bounties/3a8f36ac-5eda-41e7-a9c4-e0f3d63e6e3b
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2022-4868
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.38208
EPSS Score 0.00171
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:38:53.068315+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2022/4xxx/CVE-2022-4868.json 38.6.0