The vulnerability is an insecure direct object reference in Froxlor's email template editor. The application retrieves a mail body record by mailbodyid without verifying that the caller owns the resource. As a result, an authenticated reseller administrator can pair his own subject identifier with sequential foreign mailbodyid values in edit requests, enabling the reading of other administrators' email templates, including the full administrator's templates, thereby exposing confidential communication content.

Installations of Froxlor before version 2.3.14 remain vulnerable. Any hosting environment that has not upgraded to 2.3.14 or later is at risk.

The CVSS score of 5.3 indicates moderate risk. EPSS data is unavailable, and the vulnerability is not listed in CISA's KEV registry, suggesting that no widely available exploit is known. The flaw requires the attacker to hold reseller administrator privileges, so the attack vector is limited to authenticated users with those rights. Once authenticated, a reseller can exploit the lack of ownership checks to read other administrators’ email templates.