Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-xpgs-hpf3-3qff
Vulnerability ID VCID-xpgs-hpf3-3qff
Aliases CVE-2023-1307
GHSA-j83x-r9qq-9g4v
Summary Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13.
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-305 Authentication Bypass by Primary Weakness
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00475 https://api.first.org/data/v1/epss?cve=CVE-2023-1307
epss 0.00475 https://api.first.org/data/v1/epss?cve=CVE-2023-1307
cvssv3.1_qr CRITICAL https://github.com/advisories/GHSA-j83x-r9qq-9g4v
cvssv3.1 9.8 https://github.com/Froxlor/Froxlor
generic_textual CRITICAL https://github.com/Froxlor/Froxlor
cvssv3 9.8 https://github.com/froxlor/froxlor/commit/6777fbf229200f4fd566022e186548391219ab23
cvssv3.1 9.8 https://github.com/froxlor/froxlor/commit/6777fbf229200f4fd566022e186548391219ab23
generic_textual CRITICAL https://github.com/froxlor/froxlor/commit/6777fbf229200f4fd566022e186548391219ab23
ssvc Track* https://github.com/froxlor/froxlor/commit/6777fbf229200f4fd566022e186548391219ab23
cvssv3 9.8 https://huntr.dev/bounties/5fe85af4-a667-41a9-a00d-f99e07c5e2f1
cvssv3.1 9.8 https://huntr.dev/bounties/5fe85af4-a667-41a9-a00d-f99e07c5e2f1
generic_textual CRITICAL https://huntr.dev/bounties/5fe85af4-a667-41a9-a00d-f99e07c5e2f1
ssvc Track* https://huntr.dev/bounties/5fe85af4-a667-41a9-a00d-f99e07c5e2f1
cvssv3.1 9.8 https://nvd.nist.gov/vuln/detail/CVE-2023-1307
generic_textual CRITICAL https://nvd.nist.gov/vuln/detail/CVE-2023-1307
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2023-1307
https://github.com/Froxlor/Froxlor
https://nvd.nist.gov/vuln/detail/CVE-2023-1307
5fe85af4-a667-41a9-a00d-f99e07c5e2f1 https://huntr.dev/bounties/5fe85af4-a667-41a9-a00d-f99e07c5e2f1
6777fbf229200f4fd566022e186548391219ab23 https://github.com/froxlor/froxlor/commit/6777fbf229200f4fd566022e186548391219ab23
GHSA-j83x-r9qq-9g4v https://github.com/advisories/GHSA-j83x-r9qq-9g4v
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/Froxlor/Froxlor
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/froxlor/froxlor/commit/6777fbf229200f4fd566022e186548391219ab23
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/froxlor/froxlor/commit/6777fbf229200f4fd566022e186548391219ab23
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-02-28T17:05:24Z/ Found at https://github.com/froxlor/froxlor/commit/6777fbf229200f4fd566022e186548391219ab23
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://huntr.dev/bounties/5fe85af4-a667-41a9-a00d-f99e07c5e2f1
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://huntr.dev/bounties/5fe85af4-a667-41a9-a00d-f99e07c5e2f1
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-02-28T17:05:24Z/ Found at https://huntr.dev/bounties/5fe85af4-a667-41a9-a00d-f99e07c5e2f1
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2023-1307
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.65307
EPSS Score 0.00475
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:27:23.813936+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2023/1xxx/CVE-2023-1307.json 38.6.0