CVE-2023-24689

2023-02-0900:00:00

mitre

www.cve.org

mojoportal v2.7.0.0

authenticated

css file listing

webserver manipulation

AI Score

4.9

Confidence

High

EPSS

0.001

Percentile

37.2%

JSON

An issue in Mojoportal v2.7.0.0 and below allows an authenticated attacker to list all css files inside the root path of the webserver via manipulation of the “s” parameter in /DesignTools/ManageSkin.aspx

References

github.com/blakduk/Advisories/blob/main/Mojoportal/README.md

www.mojoportal.com/