Incorrect Permission Assignment for Critical Resource Affecting froxlor/froxlor package, versions <2.2.0
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PHP-FROXLORFROXLOR-7830474
- published 25 Aug 2024
- disclosed 23 Aug 2024
- credit hardfalcon
How to fix?
Upgrade froxlor/froxlor to version 2.2.0 or higher.
Overview
froxlor/froxlor is a server administration software.
Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource on configuration files. An attacker can gain unauthorized access to sensitive information by exploiting the readable configuration file containing database credentials.
NOTE: This is only exploitable if the instance is configured to use pure-ftpd.