CVE-2023-4381 - Unverified Password Change in instantsoft/icms2

MEDIUM

Unverified Password Change in instantsoft/icms2

Published Aug 16, 2023

4.3

MEDIUM

CVSS 3.1

EPSS 0.43%

Unverified Password Change in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

Vendor Instantsoft Product Instantsoft/icms2 Default
unknown
Affected
- ≥ unspecified, < 2.16.1-git

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Instantsoft	Instantsoft/icms2	unknown	Affected ≥ unspecified, < 2.16.1-git

No remediation recorded yet.

Weaknesses (1)

CWE-620

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-54245		Advisory
https://github.com/instantsoft/icms2/commit/58f8b9941b53b606a1b15a4364005cd2b1965507		Patch
https://huntr.dev/bounties/666c2617-e3e9-4955-9c97-2f8ed5262cc3		PatchThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner @huntrdev

Published Aug 16, 2023

Updated Oct 3, 2024

Reserved Aug 16, 2023

CISA Vulnrichment

Updated Oct 3, 2024

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner @huntrdev

Published Aug 16, 2023

Updated Oct 3, 2024

GitHub

No data