critical9.8
CVE-2023-39023
university compass v2.2.0 and below was discovered to contain a code injection vulnerability in the component org.compass.core.executor.DefaultExecutorManager.…
Impact
university compass v2.2.0 and below was discovered to contain a code injection vulnerability in the component org.compass.core.executor.DefaultExecutorManager.configure. This vulnerability is exploited via passing an unchecked argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| University Compass Project | University Compass | through 2.2.0 |