Skip to content
OpenAdvisories
Low · 3.5 CVE-2022-4867 EUVD-2022-7531GHSA-6gwx-gw56-qhf7

Cross-Site Request Forgery (CSRF) in froxlor/froxlor

Published Dec 31, 2022 · Updated Apr 9, 2025 · Assigned by @huntrdev

Vendor: froxlor Product: froxlor/froxlor Package: froxlor/froxlor Ecosystem: Packagist

Description

Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 2.0.0-beta1.

Affected products

VendorProductAffectedFixed
froxlor froxlor/froxlor unspecified – < 2.0.0-beta1 2.0.0-beta1

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist froxlor/froxlor >= 2.0.0-beta0, < 2.0.0-beta1 2.0.0-beta1 GHSA-6gwx-gw56-qhf7

References