CVE-2022-40123

mojoPortal v2.7 was discovered to contain a path traversal vulnerability via the "f" parameter at /DesignTools/CssEditor.aspx

published October 3, 2022

CVSS
—
EPSS
1%
Percentile
68.4
In the wild
Unconfirmed
What it is

mojoPortal v2.7 was discovered to contain a path traversal vulnerability via the "f" parameter at /DesignTools/CssEditor.aspx. This vulnerability allows authenticated attackers to read arbitrary files in the system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01215 · 68.4th percentile
Published
2022-10-03T12:50Z
EPSS history
Timeline
  • 03 OCT 12:50Z
    mojoPortal v2.7 was discovered to contain a path traversal vulnerability via the "f" parameter at /DesignTools/CssEditor.aspx
    cvelistv5