Lucene search
China National Vulnerability DatabaseCNVD-2023-86329HistoryOct 30, 2023 - 12:00 a.m.
IceCMS Cross-Site Request Forgery Vulnerability
2023-10-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
icecms
csrf
vulnerability
spring boot
vue
web application
trusted user
attacker
malicious request
sensitive operation
cnvd
IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation . A cross-site request forgery vulnerability exists in IceCMS v2.0.1, which originates from a WEB application that does not adequately validate whether a request comes from a trusted user. An attacker can exploit this vulnerability to forge a malicious request to trick a victim into clicking on it to perform a sensitive operation.
Related
cvelist
cvelist
CVE-2023-42188
2023-10-26 00:00:00
cve
cve
CVE-2023-42188
2023-10-27 00:15:09
prion
prion
Cross site request forgery (csrf)
2023-10-27 00:15:00
vulnrichment
vulnrichment
CVE-2023-42188
2023-10-26 00:00:00
nvd
nvd
CVE-2023-42188
2023-10-27 00:15:09