Vulnerabilities > CVE-2023-46906 - Unspecified vulnerability in Juzaweb CMS

CVSS 4.9 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

juzaweb

NVD

Published: 2024-01-09

Updated: 2024-01-12

Summary

juzaweb <= 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code. The payload in the timezone field was not correctly validated.

Vulnerable Configurations

Part	Description	Count
Application	Juzaweb Juzaweb CMS - Juzaweb CMS 1.0 Juzaweb CMS 1.0.1 Juzaweb CMS 1.0.2 Juzaweb CMS 1.0.3 Juzaweb CMS 1.0.4 Juzaweb CMS 1.0.5 Juzaweb CMS 1.0.6 Juzaweb CMS 1.1.1 Juzaweb CMS 1.1.2 Juzaweb CMS 1.1.3 Juzaweb CMS 1.1.4 Juzaweb CMS 1.1.5 Juzaweb CMS 1.1.6 Juzaweb CMS 1.1.6.1 Juzaweb CMS 1.1.7 Juzaweb CMS 1.1.7.1 Juzaweb CMS 1.1.7.2 Juzaweb CMS 1.1.7.3 Juzaweb CMS 1.2.4 Juzaweb CMS 1.2.5 Juzaweb CMS 2.0 Juzaweb CMS 2.0.1 Juzaweb CMS 2.0.2 Juzaweb CMS 2.0.3 Juzaweb CMS 2.0.4 Juzaweb CMS 2.0.5 Juzaweb CMS 2.0.6 Juzaweb CMS 2.0.7 Juzaweb CMS 3.0 Juzaweb CMS 3.0.1 Juzaweb CMS 3.0.2 Juzaweb CMS 3.0.3 Juzaweb CMS 3.0.4 Juzaweb CMS 3.0.5 Juzaweb CMS 3.0.6 Juzaweb CMS 3.0.7 Juzaweb CMS 3.0.8 Juzaweb CMS 3.0.9 Juzaweb CMS 3.1.0 Juzaweb CMS 3.1.1 Juzaweb CMS 3.1.2 Juzaweb CMS 3.1.3 Juzaweb CMS 3.1.4 Juzaweb CMS 3.1.5 Juzaweb CMS 3.1.6 Juzaweb CMS 3.1.7 Juzaweb CMS 3.1.8 Juzaweb CMS 3.2 Juzaweb CMS 3.2.1 Juzaweb CMS 3.2.2 Juzaweb CMS 3.2.3 Juzaweb CMS 3.2.4 Juzaweb CMS 3.2.5 Juzaweb CMS 3.2.6 Juzaweb CMS 3.2.7 Juzaweb CMS 3.2.8 Juzaweb CMS 3.2.9 Juzaweb CMS 3.3 Juzaweb CMS 3.3.1 Juzaweb CMS 3.3.2 Juzaweb CMS 3.3.3 Juzaweb CMS 3.3.4 Juzaweb CMS 3.3.5 Juzaweb CMS 3.3.6 Juzaweb CMS 3.3.7 Juzaweb CMS 3.3.8 Juzaweb CMS 3.3.9 Juzaweb CMS 3.4	69

Summary

Vulnerable Configurations

References