CVE-2023-24689

4.3 mediumEPSS 0.7%

Medium (4.3) in mojoportal mojoportal. EPSS 0.7% chance of exploitation in the next 30 days.

An issue in Mojoportal v2.7.0.0 and below allows an authenticated attacker to list all css files inside the root path of the webserver via manipulation of the "s" parameter in /DesignTools/ManageSkin.aspx

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2023-02-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mojoportal:mojoportal

References

https://github.com/blakduk/Advisories/blob/main/Mojoportal/README.md
https://www.mojoportal.com/
https://github.com/blakduk/Advisories/blob/main/Mojoportal/README.md
https://www.mojoportal.com/

Check your stack JSON