What is CVE-2023-6756?

CVE-2023-6756 is a medium-severity vulnerability in Thecosy Icecms, classified under Improper Restriction of Excessive Authentication Attempts. CVSS score: 5.3/10. Published 2023-12-13.

How severe is CVE-2023-6756?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Thecosy Icecms

CVE-2023-6756

A vulnerability was found in Thecosy IceCMS 2.0.1. It has been classified as problematic. Affected is an unknown function of the file /login of the component Captcha Handler. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-247884.

EPSS: 0.013 (68.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Thecosy Icecms — versions 2.0.1

Weakness classification (CWE)

CWE-307 — Improper Restriction of Excessive Authentication Attempts

References

cna@vuldb.com (Third Party Advisory, vdb-entry)
cna@vuldb.com (signature, permissions-required, Third Party Advisory)
cna@vuldb.com (Exploit, Third Party Advisory, exploit)

Frequently asked questions

What is CVE-2023-6756?: CVE-2023-6756 is a medium-severity vulnerability in Thecosy Icecms, classified under Improper Restriction of Excessive Authentication Attempts. CVSS score: 5.3/10. Published 2023-12-13.
How severe is CVE-2023-6756?: Medium severity. CVSS v3 base score is 5.3 out of 10.