CVE-2023-2822

6.1 mediumEPSS 3.3%

Medium (6.1) in ellucian ethos identity. EPSS 3.3% chance of exploitation in the next 30 days.

A vulnerability was found in Ellucian Ethos Identity up to 5.10.5. It has been classified as problematic. Affected is an unknown function of the file /cas/logout. The manipulation of the argument url leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 5.10.6 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-229596.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 3.3% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2023-05-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ellucian:ethos_identity

References

https://medium.com/@cyberninja717/685bb1675dfb
https://medium.com/@cyberninja717/reflected-cross-site-scripting-vulnerability-in-ellucian-ethos-identity-cas-logout-page-685bb1675dfb
https://vuldb.com/?ctiid.229596
https://vuldb.com/?id.229596
https://medium.com/@cyberninja717/685bb1675dfb

Check your stack JSON