PT-2024-38415
CVE-2024-7551
·
Published
2024-08-06
·
Updated
2024-08-14
Description by
CVSS 4.0
5.1
MediumMetricsAV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
juzaweb CMS versions up to 3.4.2
Description
A path traversal issue has been found in the Theme Editor component of juzaweb CMS, affecting an unknown function of the file /admin-cp/theme/editor/default. This issue can be exploited remotely, potentially leading to unauthorized access. The exploit has been disclosed publicly.
Recommendations
For versions up to 3.4.2, upgrade to a patched version immediately and review logs for signs of exploit.
As a temporary workaround, consider restricting access to the Theme Editor component until a patch is available.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾