Froxlor vulnerable to code injection

MEDIUM 6.1CVE-2022-3869 · GHSA-6rjv-xxgr-v57x · Published 05/11/2022 · updated 17/06/2026

In short

CVE-2022-3869 is a MEDIUM (CVSS 6.1) vulnerability affecting froxlor/froxlor, froxlor (froxlor).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.5% of all vulnerabilities.
Fix: update to 0.10.38.2 or later.

Package	Affected versions	Patched versions
froxlor/froxlor Packagist	`< 0.10.38.2`	`0.10.38.2`
froxlor froxlor	`< 0.10.38.2`	`0.10.38.2`

Description

Code Injection in GitHub repository froxlor/froxlor prior to version 0.10.38.2. There are currently no known workarounds, please upgrade to version 0.10.38.2.

NVD description

Code Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2.

References

nvd.nist.gov/vuln/detail/CVE-2022-3869 · ADVISORY
froxlor/froxlor commit 3f10a4a · WEB
froxlor/froxlor · WEB
huntr.dev/bounties/7de20f21-4a9b-445d-ae2b-15ade648900b · WEB

More vulnerabilities in froxlor/froxlor

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

froxlor/froxlor

Packagist

< 0.10.38.2

0.10.38.2

froxlor

< 0.10.38.2

0.10.38.2

More vulnerabilities in froxlor/froxlor

See all →