Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-hs15-esbz-bfhb
Vulnerability ID VCID-hs15-esbz-bfhb
Aliases CVE-2023-0671
GHSA-9fqc-9cpr-w73q
Summary Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10.
Status Published
Exploitability 0.5
Weighted Severity 8.9
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-94 Improper Control of Generation of Code ('Code Injection')
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00513 https://api.first.org/data/v1/epss?cve=CVE-2023-0671
epss 0.00513 https://api.first.org/data/v1/epss?cve=CVE-2023-0671
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-9fqc-9cpr-w73q
cvssv3.1 8.8 https://github.com/Froxlor/Froxlor
generic_textual HIGH https://github.com/Froxlor/Froxlor
cvssv3 9.9 https://github.com/froxlor/froxlor/commit/0034681412057fef2dfe9cce9f8a6e3321f52edc
cvssv3.1 8.8 https://github.com/froxlor/froxlor/commit/0034681412057fef2dfe9cce9f8a6e3321f52edc
generic_textual HIGH https://github.com/froxlor/froxlor/commit/0034681412057fef2dfe9cce9f8a6e3321f52edc
ssvc Track* https://github.com/froxlor/froxlor/commit/0034681412057fef2dfe9cce9f8a6e3321f52edc
cvssv3 9.9 https://huntr.dev/bounties/c2a84917-7ac0-4169-81c1-b61e617023de
cvssv3.1 8.8 https://huntr.dev/bounties/c2a84917-7ac0-4169-81c1-b61e617023de
generic_textual HIGH https://huntr.dev/bounties/c2a84917-7ac0-4169-81c1-b61e617023de
ssvc Track* https://huntr.dev/bounties/c2a84917-7ac0-4169-81c1-b61e617023de
cvssv3.1 8.8 https://nvd.nist.gov/vuln/detail/CVE-2023-0671
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2023-0671
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2023-0671
https://github.com/Froxlor/Froxlor
https://nvd.nist.gov/vuln/detail/CVE-2023-0671
0034681412057fef2dfe9cce9f8a6e3321f52edc https://github.com/froxlor/froxlor/commit/0034681412057fef2dfe9cce9f8a6e3321f52edc
c2a84917-7ac0-4169-81c1-b61e617023de https://huntr.dev/bounties/c2a84917-7ac0-4169-81c1-b61e617023de
GHSA-9fqc-9cpr-w73q https://github.com/advisories/GHSA-9fqc-9cpr-w73q
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/Froxlor/Froxlor
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Found at https://github.com/froxlor/froxlor/commit/0034681412057fef2dfe9cce9f8a6e3321f52edc
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/froxlor/froxlor/commit/0034681412057fef2dfe9cce9f8a6e3321f52edc
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-03-25T20:12:38Z/ Found at https://github.com/froxlor/froxlor/commit/0034681412057fef2dfe9cce9f8a6e3321f52edc
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Found at https://huntr.dev/bounties/c2a84917-7ac0-4169-81c1-b61e617023de
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://huntr.dev/bounties/c2a84917-7ac0-4169-81c1-b61e617023de
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-03-25T20:12:38Z/ Found at https://huntr.dev/bounties/c2a84917-7ac0-4169-81c1-b61e617023de
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2023-0671
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.67007
EPSS Score 0.00513
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:29:01.405328+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2023/0xxx/CVE-2023-0671.json 38.6.0