CVE-2023-40833

CVE-2023-40833 is a critical privilege escalation vulnerability affecting Thecosy IceCMS version 1.0.0, allowing a remote attacker to gain elevated privileges by manipulating the Id and key parameters in getCosSetting. With a CVSS score of 9.8, this vulnerability presents a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While no public exploits, Metasploit modules, or Nuclei templates are currently available, and there is minimal community discussion, its critical severity warrants immediate attention. The absence of active exploitation or public exploit code does not diminish the inherent risk posed by this easily exploitable flaw.