CVE-2023-50256

    Dashboard / Vulnerabilities / CVE-2023-50256

    CVE-2023-50256

    Published: 3 Jan 2024Last Modified: 28 Oct 2026

    Summary: Froxlor username/surname AND company field Bypass

    Details: Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements (e.g. surname, company name) established by the system. Version 2.1.2 fixes this issue.

    References: https://user-images.githubusercontent.com/80028768/289675319-81ae8ebe-1308-4ee3-bedb-43cdc40da474.mp4, https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50256.json, https://github.com/Froxlor/Froxlor/security/advisories/GHSA-625g-fm5w-w7w4, https://nvd.nist.gov/vuln/detail/CVE-2023-50256, https://github.com/Froxlor/Froxlor/commit/4b1846883d4828962add91bd844596d89a9c7cac

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -a3b0332d1389e1629cef5b8e1d585d0b61f39bf8

    Affected versions

    2.1.1
    2.1.0
    2.1.0-rc3
    2.1.0-rc2
    2.1.0-rc1
    2.1.0-beta2
    2.1.0-beta1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-50256 | CVE-DB