CVE-2023-2822: Ellucian Ethos Identity logout cross site scripting
A vulnerability was found in Ellucian Ethos Identity up to 5.10.5. It has been classified as problematic. Affected is an unknown function of the file /cas/logout. The manipulation of the argument url leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 5.10.6 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-229596.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-2822?
CVE-2023-2822 is classified as problematic and can lead to remote cross-site scripting attacks.
How do I fix CVE-2023-2822?
To fix CVE-2023-2822, upgrade Ellucian Ethos Identity to version 5.10.6 or later.
What components are affected by CVE-2023-2822?
CVE-2023-2822 affects the logout function of Ellucian Ethos Identity versions up to 5.10.5.
Can CVE-2023-2822 be exploited remotely?
Yes, CVE-2023-2822 can be exploited remotely through cross-site scripting techniques.
What type of vulnerability is CVE-2023-2822?
CVE-2023-2822 is a cross-site scripting (XSS) vulnerability found in Ellucian Ethos Identity.