cbcvebase.
CVE-2023-2822
published 2023-05-20

CVE-2023-2822: A vulnerability was found in Ellucian Ethos Identity up to 5.10.5. It has been classified as problematic. Affected is an unknown function of the file…

PriorityP342medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EXPLOIT
EPSS
3.30%
87.0th percentile
A vulnerability was found in Ellucian Ethos Identity up to 5.10.5. It has been classified as problematic. Affected is an unknown function of the file /cas/logout. The manipulation of the argument url leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 5.10.6 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-229596.

Affected

7 ranges
VendorProductVersion rangeFixed in
ellucianethos_identity< 5.10.65.10.6
ellucianethos_identity——
ellucianethos_identity——
ellucianethos_identity——
ellucianethos_identity——
ellucianethos_identity——
ellucianethos_identity——

Detection & IOCsextracted from sources · hover to see the quote

path/cas/logout↗
url/cas/logout?url=https://oast.pro">
  • →Probe for reflected XSS by sending a GET request to /cas/logout with a crafted `url` parameter containing a script payload; a vulnerable response will include the injected script tag and the string 'Identity Server' in the body with HTTP 200.
  • →Identify potentially vulnerable Ellucian Ethos Identity instances via Shodan using HTML fingerprint 'Ellucian Company', FOFA body match 'ellucian company', or Google dork 'login with ellucian ethos identity'.
  • ·The XSS is reflected (not stored), requiring user interaction (UI:R) to trigger; the attack vector is network-based with no privileges required.

CVSS provenance

nvdv3.16.1MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.