Incorrect access control in IceCMS v3.4.7 and before allows attackers to authenticate by entering any arbitrary values as the username and password via the loginAdmin method in the UserController.java file.Referenceshttps://github.com/Thecosy/iceCMS?tab=readme-ov-filehttps://github.com/Lunax0/LogLunax/blob/main/icecms/CVE-2024-46607.md
