CVE-2023-36100

2023-09-0100:00:00

mitre

www.cve.org

icecms

version 2.0.1

privilege escalation

userid parameter

api

user

changeuser

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

52.7%

JSON

An issue was discovered in IceCMS version 2.0.1, allows attackers to escalate privileges and gain sensitive information via UserID parameter in api/User/ChangeUser.

References

github.com/Thecosy/IceCMS/issues/15