CVE-2023-40833: Critical severity Icecms Project Icecms vulnerability

Published Oct 12, 2023

Updated

An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters in getCosSetting.

Affected Software

2 affected components

Icecms Project Icecms=1.0.0

Thecosy IceCMS=1.0.0

Event History

Oct 12, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2023-40833?

The severity of CVE-2023-40833 is critical.

What software is affected by CVE-2023-40833?

Thecosy IceCMS v.1.0.0 is affected by CVE-2023-40833.

How can a remote attacker exploit CVE-2023-40833?

A remote attacker can exploit CVE-2023-40833 by using the Id and key parameters in the getCosSetting function of Thecosy IceCMS v.1.0.0 to gain privileges.

Is there a fix for CVE-2023-40833?

At the moment, there is no known fix for CVE-2023-40833. It is recommended to mitigate the risk by implementing appropriate security measures, such as restricting access to the affected software.

Where can I find more information about CVE-2023-40833?

More information about CVE-2023-40833 can be found at the following link: [https://gist.github.com/Sholway/93f05987dbf35c15c26de32b1e5590ec](https://gist.github.com/Sholway/93f05987dbf35c15c26de32b1e5590ec).