Количество 3
Количество 3
CVE-2026-90935
Froxlor before 2.3.7 fails to validate the mysql_server parameter against a customer's allowed_mysqlserver allowlist in the Mysqls.add API command. Attackers can supply a disallowed server index to create MySQL databases and users on forbidden servers, bypassing per-customer access controls.
CVE-2026-90935
Froxlor before 2.3.7 fails to validate the mysql_server parameter agai ...
GHSA-w63q-47vh-4f98
Froxlor before 2.3.7 fails to validate the mysql_server parameter against a customer's allowed_mysqlserver allowlist in the Mysqls.add API command. Attackers can supply a disallowed server index to create MySQL databases and users on forbidden servers, bypassing per-customer access controls.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-90935 Froxlor before 2.3.7 fails to validate the mysql_server parameter against a customer's allowed_mysqlserver allowlist in the Mysqls.add API command. Attackers can supply a disallowed server index to create MySQL databases and users on forbidden servers, bypassing per-customer access controls. | CVSS3: 4.3 | 0% Низкий | 3 дня назад |
| CVE-2026-90935 Froxlor before 2.3.7 fails to validate the mysql_server parameter agai ... | CVSS3: 4.3 | 0% Низкий | 3 дня назад |
| GHSA-w63q-47vh-4f98 Froxlor before 2.3.7 fails to validate the mysql_server parameter against a customer's allowed_mysqlserver allowlist in the Mysqls.add API command. Attackers can supply a disallowed server index to create MySQL databases and users on forbidden servers, bypassing per-customer access controls. | CVSS3: 4.3 | 0% Низкий | 3 дня назад |
Уязвимостей на страницу