CVE-2023-4381
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
In the GitHub repository instantsoft/icms2 prior to version 2.16.1-git, there is an unverified password change, which may lead to unauthorized access.
Risk Assessment
The organization may be at risk of unauthorized access to user accounts, potentially resulting in data loss or privacy breaches.
Recommendation
It is recommended to update to version 2.16.1-git or later to secure the system against this vulnerability.
Other vulnerabilities in GitHub repository instantsoft/icms2
See all- CVE-2023-4653Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository instantsoft/icms2 prior to version 2.16.1-git, allowing for the storage of malicious code.
- CVE-2023-4652Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository instantsoft/icms2 prior to version 2.16.1-git, allowing for the storage of malicious code.
- CVE-2023-4650Medium
Improper access control exists in the GitHub repository instantsoft/icms2 prior to version 2.16.1-git.
Original NVD description (English source)
Unverified Password Change in GitHub repository instantsoft/icms2 prior to 2.16.1-git.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS