CVE-2023-36100 - An issue was discovered in IceCMS version 2.0.1, allows attackers to escalate privileges and gain se

CVE-2023-36100

Summary

An issue was discovered in IceCMS version 2.0.1, allows attackers to escalate privileges and gain sensitive information via UserID parameter in api/User/ChangeUser.

References

https://github.com/Thecosy/IceCMS/issues/15

Vulnerable Configurations

cpe:2.3:a:macwk:icecms:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:macwk:icecms:2.0.1:*:*:*:*:*:*:*

CVSS

Base:	None
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication

Impact

Confidentiality	Integrity	Availability

Last major update

01-10-2024 - 17:35

Published

01-09-2023 - 16:15

Last modified

01-10-2024 - 17:35