juzaweb CMS Access Control Vulnerability in Error Logs Page

A critical vulnerability has been identified in juzaweb CMS versions through 3.4.2, specifically within the Error Logs Page component located at /admin-cp/log-viewer. This vulnerability arises from improper access controls, allowing remote exploitation. The issue has been publicly disclosed, and the vendor has not responded to initial notifications.

Impact

Exploitation of this vulnerability allows for unauthorized access to the error logs, potentially leading to information disclosure or further exploitation.