Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An access control issue in the CheckVip function in UserController.java of IceCMS v3.4.7 and before allows unauthenticated attackers to access and returns all user information, including passwords
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IceCMS 安全漏洞
Vulnerability Description
IceCMS是NgShow个人开发者的一个基于 Spring Boot + Vue 前后端分离的内容管理系统。 IceCMS v3.4.7及之前版本存在安全漏洞，该漏洞源于存在访问控制问题，允许未经身份验证的攻击者访问并返回包括密码的所有用户信息。
CVSS Information
N/A
Vulnerability Type
N/A