CVE-2025-22984

creationtimestamp| type| source ---|---|--- 2025-01-14 16:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpnkmhoyz2p 2025-01-14 16:17:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1502 2025-01-14 16:48:29+00:00| seen|...

CVE-2025-22984

An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information...

CVE-2025-22984

CVE-2025-22984 refers to an access-control vulnerability in iceCMS v2.2.0, where the endpoint /api/squareComment/DelectSquareById can be accessed by unauthenticated users to retrieve sensitive information. The publicly available descriptions consistently identify an improper access-control mechan...