CVE-2023-23619

CVE-2023-23619 is a code injection vulnerability affecting Modelina versions prior to 1.0.0, a library used for generating data models from various schema documents. This flaw allows attackers to inject arbitrary code, particularly when default presets are used or custom handling is absent. With a CVSS score of 8.8 (High), this vulnerability presents a significant risk due to its low attack complexity, requiring only low privileges and no user interaction, potentially leading to complete compromise of confidentiality, integrity, and availability. While partially mitigated in version 1.0.0 for constrained models, the maintainers note that full protection is impossible. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.