Vulnerabilities
2 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2023-42188 | IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery (CSRF). IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery (CSRF). NVD description · AI analysis pending | 6.5 | <1% | PoC |
| — | |
| CVE-2023-36100 | An issue was discovered in IceCMS version 2.0.1, allows attackers to escalate privileges and gain sensitive information via UserID parameter in api/User/ChangeU An issue was discovered in IceCMS version 2.0.1, allows attackers to escalate privileges and gain sensitive information via UserID parameter in api/User/ChangeUser. NVD description · AI analysis pending | 9.8 | <1% | PoC |
| — |