CVE-2023-36100 Information

Description

An issue was discovered in IceCMS version 2.0.1 allows attackers to escalate privileges and gain sensitive information via UserID parameter in api/User/ChangeUser.

Reference

https://github.com/Thecosy/IceCMS/issues/15