7.2

CVSS Score

Basic Information

CVE ID

CVE-2023-3172

GHSA ID

GHSA-ghqq-jfx7-f6m9

EPSS Score

CWE

CWE-22

Published

6/9/2023

Updated

11/11/2023

KEV Status

Technology

PHP

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2023-3172

CVE-2023-3172:
Froxlor vulnerable to Path Traversal

Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20.

(GitHub Advisory)

7.2

CVSS Score

Basic Information

CVE ID

CVE-2023-3172

GHSA ID

GHSA-ghqq-jfx7-f6m9

EPSS Score

CWE

CWE-22

Published

6/9/2023

Updated

11/11/2023

KEV Status

Technology

PHP

Technical Details

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
froxlor/froxlor	composer	< 2.0.20	2.0.20

Vulnerability Intelligence
Miggo AI

Root Cause Analysis:

In progress

WAF Protection Rules

WAF Rule

P*t* Tr*v*rs*l in *it*u* r*pository *roxlor/*roxlor prior to *.*.**.

Reasoning

No *n*lysis *v*il**l*

7.2

Basic Information

Concerned about an active attack path?

CVE-2023-3172: Froxlor vulnerable to Path Traversal

7.2

Basic Information

Technical Details

Vulnerability IntelligenceMiggo AI

WAF Protection Rules

WAF Rule

Reasoning

CVE-2023-3172:
Froxlor vulnerable to Path Traversal

Vulnerability Intelligence
Miggo AI