Unverified Password Change in instantsoft/icms2
CVE-2023-4381

4.3MEDIUM

Key Information:

Vendor: Instantsoft
Status: Instantsoft/icms2
Vendor: CVE Published:; 16 August 2023

🔔 Create Instantsoft Vulnerability Alert

What is CVE-2023-4381?

Unverified Password Change in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

Affected Version(s)

instantsoft/icms2 < 2.16.1-git

References

https://huntr.dev/bounties/666c2617-e3e9-4955-9c97-2f8ed5...

https://github.com/instantsoft/icms2/commit/58f8b9941b53b...

CVSS V3.1

Score:

4.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 16, 2023
Vulnerability Reserved
Aug 16, 2023

CVE-2023-4381 Data

.