Skip to content
Heist/ feed
Back to feed
High

Froxlor username/surname AND company field Bypass

Type: advisorySources: OSV

Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements (e.g. surname, company name) established by the system. Version 2.1.2 fixes this issue.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2023-50256
Confirmed fixed CVEs
Not specified
Updated in this feed
7 Nov 2026, 01:08 UTC · Revision 1

Source evidence

Froxlor username/surname AND company field Bypass

core-osv · Original source

Published 3 Jan 2024, 22:34 UTC

Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements (e.g. surname, company name) established by the system. Version 2.1.2 fixes this issue.

osv:CVE-2023-50256
Complete source record
{
  "id": "bbb2c0149220c04537c08211aedf258cc728d30adfcf3a0a99f8bdb0a284b9ba",
  "url": "https://osv.dev/vulnerability/CVE-2023-50256",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Froxlor username/surname AND company field Bypass",
    "summary": "Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements (e.g. surname, company name) established by the system. Version 2.1.2 fixes this issue.",
    "evidence": "osv:CVE-2023-50256",
    "products": [],
    "severity": "high",
    "structured": {
      "id": "CVE-2023-50256",
      "aliases": [
        "CVE-2023-50256",
        "GHSA-625g-fm5w-w7w4"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/froxlor/froxlor",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "a3b0332d1389e1629cef5b8e1d585d0b61f39bf8"
                },
                {
                  "fixed": "4b1846883d4828962add91bd844596d89a9c7cac"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:froxlor:froxlor:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "2.1.2"
                      }
                    ],
                    "source": "CPE_RANGE"
                  },
                  {
                    "range": [
                      {
                        "fixed": "4b1846883d4828962add91bd844596d89a9c7cac"
                      }
                    ],
                    "source": "REFERENCES_COMMIT"
                  }
                ]
              }
            }
          ],
          "versions": [
            "2.1.1",
            "2.1.0",
            "2.1.0-rc3",
            "2.1.0-rc2",
            "2.1.0-rc1",
            "2.1.0-beta2",
            "2.1.0-beta1",
            "2.0.24",
            "2.0.23",
            "2.0.22",
            "2.0.21",
            "2.0.20",
            "2.0.19",
            "2.0.18",
            "2.0.17",
            "2.0.16",
            "2.0.15",
            "2.0.14",
            "2.0.13",
            "2.0.12",
            "2.0.11",
            "2.0.10",
            "2.0.9",
            "2.0.8",
            "2.0.7",
            "2.0.6",
            "2.0.5",
            "2.0.4",
            "2.0.3",
            "2.0.2",
            "2.0.1",
            "0.10.33",
            "0.10.32",
            "0.10.31",
            "0.10.30",
            "0.10.29.1",
            "0.10.29",
            "0.10.28",
            "0.10.27",
            "0.10.26",
            "0.10.25",
            "0.10.24",
            "0.10.23.1",
            "0.10.23",
            "0.10.22",
            "0.10.21",
            "0.10.20",
            "0.10.19",
            "0.10.18",
            "0.10.17",
            "0.10.16",
            "0.10.15",
            "0.10.14",
            "0.10.13",
            "0.10.12",
            "0.10.11",
            "0.10.10",
            "0.10.9",
            "0.10.8",
            "0.10.7",
            "0.10.6",
            "0.10.5",
            "0.10.4",
            "0.10.3",
            "0.10.2",
            "0.10.1",
            "0.10.0",
            "0.10.0-rc2",
            "0.10.0-rc1",
            "0.9.39.5",
            "0.9.39.4",
            "0.9.39.3",
            "0.9.39.2",
            "0.9.39.1",
            "0.9.39",
            "0.9.38.8",
            "0.9.38.7",
            "0.9.38.6",
            "0.9.38.5",
            "0.9.38.4",
            "0.9.38.3",
            "0.9.38.2",
            "0.9.38.1",
            "0.9.38",
            "0.9.38-rc2",
            "0.9.38-rc1",
            "0.9.37",
            "0.9.37-rc1",
            "0.9.36",
            "0.9.35.1",
            "0.9.35",
            "0.9.35-rc1",
            "0.9.34.2",
            "0.9.34.1",
            "0.9.33-rc3",
            "0.9.33-rc2",
            "0.9.33-rc1",
            "0.9.32",
            "0.9.32-rc2",
            "0.9.32-rc1",
            "0.9.31-rc1",
            "0.9.30",
            "0.9.30-rc1",
            "0.9.29",
            "0.9.29-rc1",
            "0.9.28.1",
            "0.9.28",
            "0.9.28-rc1",
            "0.9.27",
            "0.9.27-rc1",
            "0.9.26",
            "0.9.26-rc1",
            "0.9.25",
            "0.9.25-rc1",
            "0.9.24",
            "0.9.24-rc1",
            "0.9.23",
            "0.9.23-rc1",
            "0.9.22",
            "0.9.22-rc1",
            "0.9.21",
            "0.9.20.1",
            "0.9.20",
            "0.9.19",
            "0.9.18.1",
            "0.9.18"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-50256.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:48.682494576Z",
      "provider": "osv",
      "references": [
        "https://user-images.githubusercontent.com/80028768/289675319-81ae8ebe-1308-4ee3-bedb-43cdc40da474.mp4",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50256.json",
        "https://github.com/Froxlor/Froxlor/security/advisories/GHSA-625g-fm5w-w7w4",
        "https://nvd.nist.gov/vuln/detail/CVE-2023-50256",
        "https://github.com/Froxlor/Froxlor/commit/4b1846883d4828962add91bd844596d89a9c7cac"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-20"
        ],
        "cna_assigner": "GitHub_M",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50256.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2023-50256",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 516857,
  "published_at": "2024-01-03T22:34:47.447+00:00"
}