Beveiligingsadvies

CVE-2026-90935

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-14 12:48:30

Laatst bijgewerkt 2026-09-14 14:06:53

Toegewezen door VulnCheck

CVSS-score 5.3

Status PUBLISHED

Beschrijving

Froxlor before 2.3.7 fails to validate the mysql_server parameter against a customer's allowed_mysqlserver allowlist in the Mysqls.add API command. Attackers can supply a disallowed server index to create MySQL databases and users on forbidden servers, bypassing per-customer access controls.

← Alle CVE's bekijken Bekijk op cve.org ↗