What is GHSA-hvgf-2rf7-wrx9?

GHSA-hvgf-2rf7-wrx9 is a security advisory published by GitHub Security Advisories with Medium severity. Froxlor Information Disclosure

Which CVE IDs does GHSA-hvgf-2rf7-wrx9 cover?

GHSA-hvgf-2rf7-wrx9 covers the following CVE IDs: CVE-2020-10236. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-hvgf-2rf7-wrx9?

GHSA-hvgf-2rf7-wrx9 has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-hvgf-2rf7-wrx9?

GHSA-hvgf-2rf7-wrx9 affects 1 product, including: composer/froxlor/froxlor:\u003c 0.10.14.

GHSA-hvgf-2rf7-wrx9MediumCVSS 6.1

Froxlor Information Disclosure

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

April 25, 2024

🔗 CVE IDs covered (1)

CVE-2020-10236 →

📋 Description

An issue was discovered in Froxlor before 0.10.14. It created files with static names in /tmp during installation if the installation directory was not writable. This allowed local attackers to cause DoS or disclose information out of the config files, because of _createUserdataConf in install/lib/class.FroxlorInstall.php.

🎯 Affected products1

composer/froxlor/froxlor:< 0.10.14

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2020-10236
https://github.com/Froxlor/Froxlor/commit/6b09720ef8a1cc008751dd0ca0140a0597fedce5
https://bugzilla.suse.com/show_bug.cgi?id=1165718
https://github.com/Froxlor/Froxlor/compare/0.10.13...0.10.14
https://github.com/advisories/GHSA-hvgf-2rf7-wrx9