Back to Database
Status published
High
CVE-2018-12642
Froxlor through 0.9.39.5 has Incorrect Access Control for tickets not...
Vulnerability Description
Froxlor through 0.9.39.5 has Incorrect Access Control for tickets not owned by the current user.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-12642
Credits & Attribution
No credits recorded in the NVD database.
More from froxlor
View All →CVE-2025-48958
Froxlor has an HTML Injection Vulnerability
Medium
5.5
CVE-2025-29773
Froxlor allows Multiple Accounts to Share the Same Email Address Leading to Potential Privilege Escalation or Account Takeover
Medium
5.8
CVE-2024-34070
Froxlor Vulnerable to Blind XSS Leading to Froxlor Application Compromise
Critical
9.7
CVE-2023-6069
Improper Link Resolution Before File Access in froxlor/froxlor
Critical
9.9
CVE-2023-5564
Cross-site Scripting (XSS) - Stored in froxlor/froxlor
Medium
5.2
Affected Vendor
froxlor
View all reports →Affected Software
froxlor
Vulnerable Versions:
0
Timeline
Official Publish:
June 22nd, 2018
Last Modified:
September 16th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.