CVE-2023-6467

Summary

CVE-2023-6467 is a newly discovered vulnerability affecting Thecosy IceCMS 2.0.1. This issue is considered problematic due to the improper enforcement of a unique action during the processing of the /Websquare/likeClickComment/ file in the Comment Like Handler component. An attacker can exploit this vulnerability remotely, but the complexity of the attack is high, making it difficult to execute. The exploit for this vulnerability has been disclosed to the public, increasing the risk of it being used maliciously. VDB-246617 has been assigned to this vulnerability by the Vulnerability Database.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.