CVE-2023-6756

MEDIUM

Thecosy IceCMS 2.0.1 - Improper Restriction of Excessive Authentication Attempts in Captcha Handler

Title source: llm
STIX 2.1

Description

A vulnerability was found in Thecosy IceCMS 2.0.1. It has been classified as problematic. Affected is an unknown function of the file /login of the component Captcha Handler. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-247884.

References (3)

Core 3
Core References
Third Party Advisory vdb-entry
https://vuldb.com/?id.247884
Third Party Advisory signature permissions-required
https://vuldb.com/?ctiid.247884
Exploit, Third Party Advisory exploit
http://124.71.147.32:8082/IceCMS2.html

Scores

CVSS v3 5.3
EPSS 0.0129
EPSS Percentile 66.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-307
Status published
Products (1)
thecosy/icecms 2.0.1
Published Dec 13, 2023
Tracked Since Feb 18, 2026