IceCMS 跨站脚本漏洞

IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation . IceCMS v1.0.0 version exists cross-site scripting vulnerability, the vulnerability stems from the application of the user-supplied data lack of effective filtering and escaping, an attacker can...

CVE-2023-33355

IceCMS v1.0.0 has Insecure Permissions. There is unauthorized access to the API, resulting in the disclosure of sensitive information...

CVE-2023-33355

IceCMS v1.0.0 is affected by an Insecure Permissions vulnerability that allows unauthorized access to the API and results in disclosure of sensitive information. The issue stems from improper access control in IceCMS, as described across multiple sources (e.g., CNVD, NVD/Red Hat records). Affecte...

CVE-2023-33356

IceCMS v1.0.0 is affected by a Cross Site Scripting (XSS) vulnerability. The NVD entry cites CVSSv3.1: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N with a base score of 5.4 (Medium). Root cause described in CNVD/PRION/Red Hat entries attributes the issue to inadequate filtering/escaping of user-supplied d...

CVE-2023-33356

IceCMS v1.0.0 is vulnerable to Cross Site Scripting XSS...

PT-2023-24306 · Icecms · Icecms

Name of the Vulnerable Software and Affected Versions: IceCMS version 1.0.0 Description: The issue is related to Insecure Permissions, allowing unauthorized access to the API. This results in the disclosure of sensitive information. Recommendations: For IceCMS version 1.0.0, consider restricting...

CVE-2023-33356: Improper Neutralization of Input During Web Page Generation

IceCMS v1.0.0 is vulnerable to Cross Site Scripting XSS...

CVE-2023-33355

IceCMS v1.0.0 has Insecure Permissions. There is unauthorized access to the API, resulting in the disclosure of sensitive information...

IceCMS 安全漏洞

IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation . An access control error vulnerability exists in IceCMS v1.0.0, which stems from improper access control in the system and can be exploited by an attacker to cause sensitive information leakage...

CVE-2023-33355: Undefined Security Weakness

IceCMS v1.0.0 has Insecure Permissions. There is unauthorized access to the API, resulting in the disclosure of sensitive information...

PT-2023-24307 · Icecms · Icecms

Name of the Vulnerable Software and Affected Versions: IceCMS version 1.0.0 Description: The issue is related to Cross Site Scripting XSS, which is a type of attack where an attacker injects malicious scripts into a website, allowing them to steal user data or take control of the user's session...