PT-2024-38415
CVE-2024-7551
·
تاريخ النشر
2024-08-06
·
تاريخ التحديث
2024-08-14
الوصف من
CVSS 4.0
5.1
متوسطةالمقاييسAV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
juzaweb CMS versions up to 3.4.2
Description
A path traversal issue has been found in the Theme Editor component of juzaweb CMS, affecting an unknown function of the file /admin-cp/theme/editor/default. This issue can be exploited remotely, potentially leading to unauthorized access. The exploit has been disclosed publicly.
Recommendations
For versions up to 3.4.2, upgrade to a patched version immediately and review logs for signs of exploit.
As a temporary workaround, consider restricting access to the Theme Editor component until a patch is available.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾