Lucene search
HistoryOct 03, 2022 - 1:15 p.m.
CVE-2022-40123
cve-2022-40123
mojoportal
v2.7
path traversal
vulnerability
authenticated attackers
arbitrary files
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
37.3%
mojoPortal v2.7 was discovered to contain a path traversal vulnerability via the “f” parameter at /DesignTools/CssEditor.aspx. This vulnerability allows authenticated attackers to read arbitrary files in the system.
Affected configurations
Node
mojoportalmojoportalMatch2.7.0.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| mojoportal:mojoportal | mojoportal | eq | 2.7.0.0 |
References
Social References
More
Related
cnvd
cnvd
mojoPortal directory traversal vulnerability
2022-10-11 00:00:00
nvd
nvd
CVE-2022-40123
2022-10-03 13:15:11
cvelist
cvelist
CVE-2022-40123
2022-10-03 12:50:02
prion
prion
Path traversal
2022-10-03 13:15:00
osv
osv
CVE-2022-40123
2022-10-03 13:15:11
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
37.3%
Related for CVE-2022-40123