Lucene search

MitreVULNRICHMENT:CVE-2023-35858

HistoryJun 13, 2024 - 12:00 a.m.

CVE-2023-35858

2024-06-1300:00:00

mitre

github.com

xpath injection

modern campus omni

remote attacker

AI Score

7.4

Confidence

Low

EPSS

Percentile

9.0%

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

partial

JSON

XPath Injection vulnerabilities in the blog and RSS functions of Modern Campus - Omni CMS 2023.1 allow a remote, unauthenticated attacker to obtain application information.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:moderncampus:omni_cms:2023.1:*:*:*:*:*:*:*"
    ],
    "vendor": "moderncampus",
    "product": "omni_cms",
    "versions": [
      {
        "status": "affected",
        "version": "2023.1"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

lp.constantcontactpages.com/cu/c2nSB5D/moderncampuscve