CVE-2023-0566: Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')

January 29, 2023 (updated December 18, 2023)

Static Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10.

References

github.com/advisories/GHSA-w7w4-qjgg-372x
github.com/froxlor/froxlor/commit/bd5b99dc1c06f594b9563d459a50bf3b32504876
huntr.dev/bounties/8339e4f1-d430-4845-81b5-36dd9fcdac49
nvd.nist.gov/vuln/detail/CVE-2023-0566

Detect and mitigate CVE-2023-0566 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →