Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-mgwv-2pj5-pqav
Vulnerability ID VCID-mgwv-2pj5-pqav
Aliases CVE-2023-0316
GHSA-xp3g-2729-rxm3
Summary Path Traversal: '\..\filename' in GitHub repository froxlor/froxlor prior to 2.0.0.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-29 Path Traversal: '..filename'
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00265 https://api.first.org/data/v1/epss?cve=CVE-2023-0316
epss 0.00265 https://api.first.org/data/v1/epss?cve=CVE-2023-0316
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-xp3g-2729-rxm3
cvssv3.1 5.5 https://github.com/Froxlor/Froxlor
generic_textual MODERATE https://github.com/Froxlor/Froxlor
cvssv3 6.8 https://github.com/froxlor/froxlor/commit/983d9294603925018225d672795bd8b4a526f41e
cvssv3.1 5.5 https://github.com/froxlor/froxlor/commit/983d9294603925018225d672795bd8b4a526f41e
generic_textual MODERATE https://github.com/froxlor/froxlor/commit/983d9294603925018225d672795bd8b4a526f41e
ssvc Track https://github.com/froxlor/froxlor/commit/983d9294603925018225d672795bd8b4a526f41e
cvssv3 6.8 https://huntr.dev/bounties/c190e42a-4806-47aa-aa1e-ff5d6407e244
cvssv3.1 5.5 https://huntr.dev/bounties/c190e42a-4806-47aa-aa1e-ff5d6407e244
generic_textual MODERATE https://huntr.dev/bounties/c190e42a-4806-47aa-aa1e-ff5d6407e244
ssvc Track https://huntr.dev/bounties/c190e42a-4806-47aa-aa1e-ff5d6407e244
cvssv3.1 5.5 https://nvd.nist.gov/vuln/detail/CVE-2023-0316
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2023-0316
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2023-0316
https://github.com/Froxlor/Froxlor
https://nvd.nist.gov/vuln/detail/CVE-2023-0316
983d9294603925018225d672795bd8b4a526f41e https://github.com/froxlor/froxlor/commit/983d9294603925018225d672795bd8b4a526f41e
c190e42a-4806-47aa-aa1e-ff5d6407e244 https://huntr.dev/bounties/c190e42a-4806-47aa-aa1e-ff5d6407e244
GHSA-xp3g-2729-rxm3 https://github.com/advisories/GHSA-xp3g-2729-rxm3
No exploits are available.
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/Froxlor/Froxlor
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N Found at https://github.com/froxlor/froxlor/commit/983d9294603925018225d672795bd8b4a526f41e
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/froxlor/froxlor/commit/983d9294603925018225d672795bd8b4a526f41e
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-07T15:08:55Z/ Found at https://github.com/froxlor/froxlor/commit/983d9294603925018225d672795bd8b4a526f41e
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N Found at https://huntr.dev/bounties/c190e42a-4806-47aa-aa1e-ff5d6407e244
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Found at https://huntr.dev/bounties/c190e42a-4806-47aa-aa1e-ff5d6407e244
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-07T15:08:55Z/ Found at https://huntr.dev/bounties/c190e42a-4806-47aa-aa1e-ff5d6407e244
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2023-0316
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.50264
EPSS Score 0.00265
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:28:55.771533+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2023/0xxx/CVE-2023-0316.json 38.6.0