Skip to content
Threat Feed
Subscribe

Product

Froxlor (2.0.0-2.3.10)

1 brief RSS
critical advisory

Arbitrary File Deletion in Froxlor via Symlink Following

Froxlor versions through 2.3.10 are vulnerable to arbitrary file deletion where authenticated users can plant symlinks to trigger recursive deletion by a root-privileged cron task, leading to potential data destruction.

Froxlor +3 information-disclosure api-security credential-access authentication-bypass vulnerability webserver web-vulnerability authorization-bypass +1
9t 1c