CVE-2023-4381

Unverified Password Change in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

Score

CVSS 3.1 4.3 Medium

Status

Modified - security@huntr.dev

Published

2023-08-16

Last modified

2024-10-03

Weaknesses

CWE-620

Affected products

• Instantcms (Instantcms)
• Instantsofticms2 (Instantsoft)

References

• https://github.com/instantsoft/icms2/commit/58f8b9941b53b606a1b15a4364005cd2b1965507
• https://huntr.dev/bounties/666c2617-e3e9-4955-9c97-2f8ed5262cc3