Juzaweb CMS Broken Access Control Vulnerability in Plugins Page

A critical broken access control vulnerability has been identified in Juzaweb CMS versions through 3.4.2. This issue allows unprivileged users to access the Plugins Page in the admin panel, where they can list installed plugins and upload new ones, potentially including malicious code. The vulnerability arises from improper access controls in the plugin installation feature, which can be exploited remotely.

Impact

Exploitation of this vulnerability allows an attacker to enumerate installed plugins and upload plugins containing malicious code.

Reproduction

To reproduce this vulnerability, create a new user and assign it a role with all permissions disabled. Log in with this account and navigate to the plugin installation page in the admin panel. The user will be able to see a list of installed plugins and upload new ones.