MEDIUM🇵🇱 Wersja polska

CVE-2023-6760

CVSS 6.3v3.1pub. 2023-12-13upd. 2024-11-21

A vulnerability classified as critical was found in Thecosy IceCMS up to 2.0.1. This vulnerability affects unknown code. The manipulation leads to manage user sessions. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-247888.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

  • Thecosy Icecms

    APP
    Thecosy
    2.0.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-48202CRITICAL9.8PL ✓ten sam produkt

Nieograniczony upload plików w Thecosy IceCMS — RCE przez FileUtils.java

CVE-2024-46612CRITICAL9.8PL ✓ten sam produkt

IceCMS: zakodowany na stałe klucz JWT umożliwia fałszowanie tokenów

CVE-2023-40833CRITICAL9.8ten sam produkt

An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters i...

CVE-2025-22983HIGH7.5ten sam produkt

An access control issue in the component /square/getAllSquare/circle of iceCMS v2.2.0 allows unauthenticated a...

CVE-2025-22984HIGH7.5ten sam produkt

An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthent...