PT-2023-24306 · Icecms · Icecms

Published 2023-05-25 · Updated 2025-01-16 · CVE-2023-33355

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IceCMS version 1.0.0

Description The issue is related to Insecure Permissions, allowing unauthorized access to the API. This results in the disclosure of sensitive information.

Recommendations For IceCMS version 1.0.0, consider restricting access to the API as a temporary workaround until a patch is available. Additionally, review and update the permission settings to prevent unauthorized access.

Exploit

Fix

Related Identifiers

CVE-2023-33355

Affected Products

Icecms

References · 4

• 🔥 https://github.com/Thecosy/IceCMS/issues/7 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-33355 · Security Note
• https://osv.dev/vulnerability/CVE-2023-33355 · Vendor Advisory
• https://t.me/cvenotify/51320 · Telegram Post