medium4.9
CVE-2023-46906
juzawebCMS Incorrect Access Control vulnerability
Impact
juzaweb <= 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code. The payload in the timezone field was not correctly validated.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | juzaweb/cms | <= 3.4 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Juzaweb | Cms | through 3.4 |