high7.5
CVE-2024-46609
An access control issue in the CheckVip function in UserController.java of IceCMS v3.4.7 and before allows unauthenticated attackers to access and returns all …
Impact
An access control issue in the CheckVip function in UserController.java of IceCMS v3.4.7 and before allows unauthenticated attackers to access and returns all user information, including passwords
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thecosy | Icecms | through 3.4.7 |