All vulnerabilities

Servers and applications

GHSA-pp2f-frcg-w8rv

Missing authorization via unchecked `parentdomainid` in `SubDomains.delete`, enabling deletion of a reseller-assigned main domain

Severity
Medium 5.4
Published
20 Oct 2026
Last changed
20 Oct 2026
Added to UpHeron
1 Nov 2026
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
FroxlorServers and applications · github:froxlor/froxlor
  • From 2.0.0 up to 2.3.14

References