CVE-2023-4650
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
Improper access control exists in the GitHub repository instantsoft/icms2 prior to version 2.16.1-git.
Risk Assessment
Improper access control may lead to unauthorized access to sensitive data or application functions.
Recommendation
It is recommended to upgrade to version 2.16.1-git or later to mitigate this vulnerability.
Other vulnerabilities in GitHub repository instantsoft/icms2
See all- CVE-2023-4653Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository instantsoft/icms2 prior to version 2.16.1-git, allowing for the storage of malicious code.
- CVE-2023-4652Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository instantsoft/icms2 prior to version 2.16.1-git, allowing for the storage of malicious code.
- CVE-2023-4381Medium
In the GitHub repository instantsoft/icms2 prior to version 2.16.1-git, there is an unverified password change, which may lead to unauthorized access.
Original NVD description (English source)
Improper Access Control in GitHub repository instantsoft/icms2 prior to 2.16.1-git.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS