CVE-2023-6438

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Nov 30, 2023
Updated: May 17, 2024
CWE ID 837

Summary

CVE-2023-6438 is a recently disclosed vulnerability affecting Thecosy IceCMS 2.0.1. An unknown function in the /WebArticle/articles/ component, specifically the Like Handler, is responsible for this issue. The vulnerability results in inadequate enforcement of a unique action, potentially allowing remote attackers to exploit it. This exploit has been made public, increasing the risk for potential cyberattacks using VDB-246438 identifier.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share