CVE-2022-40123

MediumCVSS 6.5

Published: 03/10/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.99%

58th percentile - higher than 58% of all known CVEs

Summary

mojoPortal v2.7 was discovered to contain a path traversal vulnerability via the 'f' parameter at /DesignTools/CssEditor.aspx. This allows authenticated attackers to read arbitrary files on the system.

Risk Assessment

The risk involves potential exposure of sensitive data such as configuration files, passwords, or user data, which could lead to further attack escalation.

Recommendation

Immediately update mojoPortal to the latest version and implement input validation for the 'f' parameter to prevent path manipulation.

Original NVD description (English source)

mojoPortal v2.7 was discovered to contain a path traversal vulnerability via the "f" parameter at /DesignTools/CssEditor.aspx. This vulnerability allows authenticated attackers to read arbitrary files in the system.