CVE-2023-33355: High severity Icecms Project Icecms vulnerability
Published May 25, 2023
·Updated
IceCMS v1.0.0 has Insecure Permissions. There is unauthorized access to the API, resulting in the disclosure of sensitive information.
Affected Software
2 affected components
Icecms Project Icecms=1.0.0
Thecosy IceCMS=1.0.0
Event History
May 25, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2023-33355?
CVE-2023-33355 is a vulnerability in IceCMS v1.0.0 that allows unauthorized access to the API, leading to the disclosure of sensitive information.
2
How severe is CVE-2023-33355?
CVE-2023-33355 has a severity value of 7, which is classified as high.
3
How does CVE-2023-33355 affect IceCMS v1.0.0?
CVE-2023-33355 affects IceCMS v1.0.0 by allowing unauthorized access to the API.
4
What is the CWE classification for CVE-2023-33355?
CVE-2023-33355 is classified as NVD-CWE-Other.
5
Is there a fix available for CVE-2023-33355?
There is currently no fix available for CVE-2023-33355. It is recommended to follow any updates or patches provided by the IceCMS project.