CVE-2023-46906

Published: Jan 9, 2024
Updated: May 4, 2025
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2023-46906" target="_blank" rel="noopener"> CVE-2023-46906
GHSA: <a href="https://github.com/advisories/GHSA-93p6-9cxv-5rpq" target="_blank" rel="noopener"> GHSA-93p6-9cxv-5rpq
Severity: Low
Exploit:

juzaweb <= 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code. The payload in the timezone field was not correctly validated.