MEDIUM🇵🇱 Wersja polska

CVE-2023-6438

CVSS 4.3v3.1pub. 2023-11-30upd. 2024-11-21

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-246438 is the identifier assigned to this vulnerability.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

  • Thecosy Icecms

    APP
    Thecosy
    2.0.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-48202CRITICAL9.8PL ✓ten sam produkt

Nieograniczony upload plików w Thecosy IceCMS — RCE przez FileUtils.java

CVE-2024-46612CRITICAL9.8PL ✓ten sam produkt

IceCMS: zakodowany na stałe klucz JWT umożliwia fałszowanie tokenów

CVE-2023-40833CRITICAL9.8ten sam produkt

An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters i...

CVE-2025-22983HIGH7.5ten sam produkt

An access control issue in the component /square/getAllSquare/circle of iceCMS v2.2.0 allows unauthenticated a...

CVE-2025-22984HIGH7.5ten sam produkt

An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthent...