CVE-2025-22983: High severity icecms vulnerability
Published Jan 14, 2025
·Updated
An access control issue in the component /square/getAllSquare/circle of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information.
Affected Software
2 affected components
iceCMS iceCMS
Thecosy IceCMS=2.2.0
Event History
Jan 14, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-22983?
CVE-2025-22983 is considered a medium severity vulnerability.
2
How do I fix CVE-2025-22983?
To fix CVE-2025-22983, ensure proper access control measures are implemented to restrict unauthenticated access to sensitive information.
3
Which versions of iceCMS are affected by CVE-2025-22983?
CVE-2025-22983 affects iceCMS version 2.2.0.
4
What type of vulnerability is CVE-2025-22983?
CVE-2025-22983 is an access control vulnerability.
5
Can CVE-2025-22983 be exploited remotely?
Yes, CVE-2025-22983 can be exploited remotely by unauthenticated attackers.