Vulnerability: Incorrect Access Control in juzaweb <= 3.4

CVE-2023-46906 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

juzaweb <= 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code. The payload in the timezone field was not correctly validated.

Learn more about our Web App Pen Testing.