THREAT OPS › Threat News › [GHSA] GHSA-xpr4-8vp6-c87j (medium) — Froxlor has CSRF Vulnerability in AJAX Endpoint — Missing Cross-Site Request Forgery Protection
[GHSA] GHSA-xpr4-8vp6-c87j (medium) — Froxlor has CSRF Vulnerability in AJAX Endpoint — Missing Cross-Site Request Forgery Protection
GHSA-xpr4-8vp6-c87j Severity: medium CVE: CVE-2026-55593
Froxlor has CSRF Vulnerability in AJAX Endpoint — Missing Cross-Site Request Forgery Protection
## Summary
The Froxlor AJAX endpoint (`lib/ajax.php`) is missing Cross-Site Request Forgery (CSRF) protection. While the main application (`lib/init.php`) enforces CSRF token validation on all state-changing HTTP requests (POST/PUT/PATCH/DELETE
MITRE ATT&CK techniques
- JavaScriptT1059.007
Indicators of compromise
- CVE-2026-55593cve
- https://attacker.com/csrf.htmlurl
- http://192.168.1.100/`url
- http://attacker.local/csrf_poc.html`url
- http://`url
Original source: https://github.com/advisories/GHSA-xpr4-8vp6-c87j