Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-x93s-u6kq-fbbe
Vulnerability ID VCID-x93s-u6kq-fbbe
Aliases CVE-2023-50256
GHSA-625g-fm5w-w7w4
Summary Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements (e.g. surname, company name) established by the system. Version 2.1.2 fixes this issue.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-20 Improper Input Validation
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2023-50256
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2023-50256
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-625g-fm5w-w7w4
cvssv3.1 7.5 https://github.com/Froxlor/Froxlor
generic_textual HIGH https://github.com/Froxlor/Froxlor
cvssv3.1 7.5 https://github.com/Froxlor/Froxlor/commit/4b1846883d4828962add91bd844596d89a9c7cac
generic_textual HIGH https://github.com/Froxlor/Froxlor/commit/4b1846883d4828962add91bd844596d89a9c7cac
ssvc Track https://github.com/Froxlor/Froxlor/commit/4b1846883d4828962add91bd844596d89a9c7cac
cvssv3.1 7.5 https://github.com/Froxlor/Froxlor/security/advisories/GHSA-625g-fm5w-w7w4
cvssv3.1_qr HIGH https://github.com/Froxlor/Froxlor/security/advisories/GHSA-625g-fm5w-w7w4
generic_textual HIGH https://github.com/Froxlor/Froxlor/security/advisories/GHSA-625g-fm5w-w7w4
ssvc Track https://github.com/Froxlor/Froxlor/security/advisories/GHSA-625g-fm5w-w7w4
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2023-50256
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2023-50256
cvssv3.1 7.5 https://user-images.githubusercontent.com/80028768/289675319-81ae8ebe-1308-4ee3-bedb-43cdc40da474.mp4
generic_textual HIGH https://user-images.githubusercontent.com/80028768/289675319-81ae8ebe-1308-4ee3-bedb-43cdc40da474.mp4
ssvc Track https://user-images.githubusercontent.com/80028768/289675319-81ae8ebe-1308-4ee3-bedb-43cdc40da474.mp4
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2023-50256
https://github.com/Froxlor/Froxlor
289675319-81ae8ebe-1308-4ee3-bedb-43cdc40da474.mp4 https://user-images.githubusercontent.com/80028768/289675319-81ae8ebe-1308-4ee3-bedb-43cdc40da474.mp4
4b1846883d4828962add91bd844596d89a9c7cac https://github.com/Froxlor/Froxlor/commit/4b1846883d4828962add91bd844596d89a9c7cac
CVE-2023-50256 https://nvd.nist.gov/vuln/detail/CVE-2023-50256
GHSA-625g-fm5w-w7w4 https://github.com/advisories/GHSA-625g-fm5w-w7w4
GHSA-625g-fm5w-w7w4 https://github.com/Froxlor/Froxlor/security/advisories/GHSA-625g-fm5w-w7w4
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Found at https://github.com/Froxlor/Froxlor
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Found at https://github.com/Froxlor/Froxlor/commit/4b1846883d4828962add91bd844596d89a9c7cac
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-01-09T15:34:46Z/ Found at https://github.com/Froxlor/Froxlor/commit/4b1846883d4828962add91bd844596d89a9c7cac
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Found at https://github.com/Froxlor/Froxlor/security/advisories/GHSA-625g-fm5w-w7w4
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-01-09T15:34:46Z/ Found at https://github.com/Froxlor/Froxlor/security/advisories/GHSA-625g-fm5w-w7w4
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2023-50256
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Found at https://user-images.githubusercontent.com/80028768/289675319-81ae8ebe-1308-4ee3-bedb-43cdc40da474.mp4
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-01-09T15:34:46Z/ Found at https://user-images.githubusercontent.com/80028768/289675319-81ae8ebe-1308-4ee3-bedb-43cdc40da474.mp4
Exploit Prediction Scoring System (EPSS)
Percentile 0.18731
EPSS Score 0.00059
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:28:07.365823+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2023/50xxx/CVE-2023-50256.json 38.6.0