An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters in getCosSetting.
References
Link | Resource |
---|---|
https://gist.github.com/Sholway/93f05987dbf35c15c26de32b1e5590ec | Third Party Advisory |
Configurations
History
07 Dec 2023, 15:11
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:thecosy:icecms:1.0.0:*:*:*:*:*:*:* | |
First Time |
Thecosy icecms
Thecosy |
17 Oct 2023, 14:30
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
CWE | NVD-CWE-noinfo | |
First Time |
Icecms Project icecms
Icecms Project |
|
References | (MISC) https://gist.github.com/Sholway/93f05987dbf35c15c26de32b1e5590ec - Third Party Advisory | |
CPE | cpe:2.3:a:icecms_project:icecms:1.0.0:*:*:*:*:*:*:* |
12 Oct 2023, 06:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-10-12 06:15
Updated : 2024-02-28 20:33
NVD link : CVE-2023-40833
Mitre link : CVE-2023-40833
CVE.ORG link : CVE-2023-40833
JSON object : View
Products Affected
thecosy
- icecms
CWE