Security Resilience

CVE-2023-6760

Thecosy Icecms 2.0.1

Public PoC
Published
13 December 2023
Modified
21 November 2024
CVSS Score v3.1 6.3
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS Score 0.0064 50th percentile
Risk Priority 50 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-6760 is a medium-severity an unspecified weakness vulnerability in Thecosy Icecms. Its CVSS base score is 6.3 (Medium).

Operationally, ranked at the 50th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability Data

A vulnerability classified as critical was found in Thecosy IceCMS up to 2.0.1. This vulnerability affects unknown code. The manipulation leads to manage user sessions. The attack can be initiated remotely. The exploit has been disclosed to the public and…

more

may be used. The identifier of this vulnerability is VDB-247888.

CWE(s)
CWE-1018

Related Threats

CVEs Like This One

CVE-2025-22983Same product: Thecosy Icecms
CVE-2023-6761Same product: Thecosy Icecms
CVE-2023-6758Same product: Thecosy Icecms
CVE-2023-33355Same product: Thecosy Icecms
CVE-2024-46610Same product: Thecosy Icecms
CVE-2023-6759Same product: Thecosy Icecms
CVE-2024-46609Same product: Thecosy Icecms
CVE-2024-46607Same product: Thecosy Icecms
CVE-2023-6438Same product: Thecosy Icecms
CVE-2023-6466Same product: Thecosy Icecms

Affected Assets

thecosy
icecms
2.0.1

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References