CVE Catalog
CVE-2023-4704
MediumCVSS 4.9Exploitation Probability (EPSS)
Low risk0.74%
50th percentile - higher than 50% of all known CVEs
Summary
In the GitHub repository instantsoft/icms2 prior to version 2.16.1-git, there is an external control of system or configuration settings.
Risk Assessment
An attacker could manipulate system settings, potentially leading to unauthorized access or changes to the application's configuration.
Recommendation
It is recommended to upgrade to version 2.16.1-git or later to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git.