CVE-2023-6761: Thecosy IceCMS User Data access control

Published Dec 13, 2023

Updated

A vulnerability, which was classified as problematic, has been found in Thecosy IceCMS up to 2.0.1. This issue affects some unknown processing of the component User Data Handler. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-247889 was assigned to this vulnerability.

Affected Software

1 affected component

Thecosy IceCMS=2.0.1

Event History

Dec 13, 2023

CVE Published

04:00 PM

Data Sourced

04:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-6761?

CVE-2023-6761 is classified as problematic, indicating a significant security concern that requires attention.

How do I fix CVE-2023-6761?

To fix CVE-2023-6761, upgrade to the latest version of Thecosy IceCMS, which addresses the vulnerability.

What component is affected by CVE-2023-6761?

CVE-2023-6761 affects the User Data Handler component within Thecosy IceCMS.

Can CVE-2023-6761 be exploited remotely?

Yes, CVE-2023-6761 can be exploited remotely, allowing attackers to initiate the exploit from outside the affected system.

What type of vulnerability is CVE-2023-6761?

CVE-2023-6761 is categorized as an access control vulnerability, leading to improper management of user permissions.