Loading HuntDB...

GHSA-4gm9-c9jq-g523

GitHub Security Advisory

Froxlor vulnerable to Allocation of Resources Without Limits or Throttling

✓ GitHub Reviewed MODERATE Has CVE

Advisory Details

Froxlor prior to 2.0.16 has a password reset page with no rate limit.

Affected Packages

Packagist froxlor/froxlor
Affected versions: 0 (fixed in 2.0.16)

Related CVEs

Key Information

GHSA ID
GHSA-4gm9-c9jq-g523
Published
May 19, 2023 6:30 PM
Last Modified
May 19, 2023 11:46 PM
CVSS Score
5.0 /10
Primary Ecosystem
Packagist
Primary Package
froxlor/froxlor
GitHub Reviewed
✓ Yes

Dataset

Last updated: September 16, 2025 6:29 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.