CVE-2023-24689: Mojoportal

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue in Mojoportal v2.7.0.0 and below allows an authenticated attacker to list all css files inside the root path of the webserver via manipulation of the "s" parameter in /DesignTools/ManageSkin.aspx

Affected products

• Mojoportal Mojoportal: version 2.7.0.0 only

Published 2023-02-09. Last modified 2026-06-17.