CVE-2023-6438: Thecosy IceCMS Like improper enforcement of a single, unique action

Published Nov 30, 2023

Updated

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-246438 is the identifier assigned to this vulnerability.

Affected Software

1 affected component

Thecosy IceCMS=2.0.1

Event History

Nov 30, 2023

CVE Published

05:00 PM

Data Sourced

05:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-6438?

The severity of CVE-2023-6438 is medium with a severity value of 5.3.

What is the vulnerability description of CVE-2023-6438?

CVE-2023-6438 is a vulnerability in Thecosy IceCMS 2.0.1 that allows for improper enforcement of a single, unique action.

How does CVE-2023-6438 impact Thecosy IceCMS 2.0.1?

CVE-2023-6438 allows for remote attackers to launch the attack against Thecosy IceCMS 2.0.1.

What is the affected software for CVE-2023-6438?

The affected software for CVE-2023-6438 is Thecosy IceCMS version 2.0.1.

How can CVE-2023-6438 be mitigated?

To mitigate CVE-2023-6438, it is recommended to update Thecosy IceCMS to a version that addresses the vulnerability.