CVE-2023-44011

2023-10-0200:00:00

mitre

www.cve.org

mojoportal

security vulnerability

remote code execution

crafted script

layout.master skin file

skin management component

9.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.0%

JSON

An issue in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the layout.master skin file at the Skin management component.

References

github.com/Vietsunshine-Electronic-Solution-JSC/Vulnerability-Disclosures/tree/main/2023/CVE-2023-44011