CVE-2023-46906

Name of the Vulnerable Software and Affected Versions juzaweb versions 3.4 and earlier

Description The issue is related to Incorrect Access Control, which can result in an application outage after a 500 HTTP status code. The problem arises from the incorrect validation of the payload in the timezone field.

Recommendations For juzaweb versions 3.4 and earlier, as a temporary workaround, consider restricting access to the timezone field to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.