CyberRota Analysis
AI-GeneratedFroxlor versions prior to 2.3.8 are vulnerable to a stored cross-site scripting (XSS) attack via DNS TXT records, allowing authenticated users with DNS editor access to inject JavaScript. When an administrator views the DNS configuration, the malicious payload executes in their browser, potentially exposing session data or enabling unauthorized actions. Organizations using Froxlor for server administration should prioritize upgrading to version 2.3.8 to mitigate this high-severity vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Froxlor is open source server administration software. Prior to 2.3.8, DNS TXT record content accepted by lib/Froxlor/Api/Commands/DomainZones.php can contain HTML special characters, lib/Froxlor/UI/Callbacks/Text.php returns the content from Text::wordwrap without HTML escaping, and templates/Froxlor/table/table.html.twig renders the callback result with the raw filter. An authenticated customer with DNS editor access can store JavaScript-bearing content in a TXT record. When an administrator views the affected domain's DNS configuration, the payload executes automatically in the administrator's browser session, which can expose session data or perform privileged panel actions. This issue is fixed in version 2.3.8.