CVE-2023-39023

CriticalCVSS 9.8

Published: 28/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.77%

51th percentile - higher than 51% of all known CVEs

Summary

Version 2.2.0 and below of university compass was found to contain a code injection vulnerability in the component org.compass.core.executor.DefaultExecutorManager.configure. This vulnerability can be exploited by passing an unchecked argument.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized code execution, posing a serious threat to the security of the system and user data.

Recommendation

It is recommended to upgrade to the latest version of university compass to eliminate this vulnerability and implement argument validation mechanisms.

Original NVD description (English source)

university compass v2.2.0 and below was discovered to contain a code injection vulnerability in the component org.compass.core.executor.DefaultExecutorManager.configure. This vulnerability is exploited via passing an unchecked argument.