CVE-2023-6759: Thecosy IceCMS Love resource improper enforcement of a single, unique action

Published Dec 13, 2023

Updated

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. This affects an unknown part of the file /WebResource/resource of the component Love Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-247887.

Affected Software

1 affected component

Thecosy IceCMS=2.0.1

Event History

Dec 13, 2023

CVE Published

03:00 PM

Data Sourced

03:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-6759?

CVE-2023-6759 is classified as a problematic vulnerability.

How do I fix CVE-2023-6759?

Fixing CVE-2023-6759 involves applying the latest patch released by Thecosy for IceCMS version 2.0.1.

What component does CVE-2023-6759 affect?

CVE-2023-6759 affects the Love Handler component in IceCMS version 2.0.1.

What causes the issue in CVE-2023-6759?

The issue in CVE-2023-6759 is caused by improper enforcement of a single, unique action in the system.

Is any version of IceCMS vulnerable to CVE-2023-6759?

Only IceCMS version 2.0.1 is reported to be vulnerable to CVE-2023-6759.