CVE-2025-5422

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-5422

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-5422.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-5422

Published

2025-06-02T01:00:24.461Z

Modified

2026-07-15T01:49:19.618481953Z

Severity

5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

juzaweb CMS Email Logs Page email access control

Details

A vulnerability, which was classified as problematic, was found in juzaweb CMS up to 3.4.2. This affects an unknown part of the file /admin-cp/logs/email of the component Email Logs Page. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/5xxx/CVE-2025-5422.json",
    "cwe_ids": [
        "CWE-266",
        "CWE-284"
    ],
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "3.4.0"
                },
                {
                    "last_affected": "3.4.0"
                },
                {
                    "introduced": "3.4.1"
                },
                {
                    "last_affected": "3.4.1"
                },
                {
                    "introduced": "3.4.2"
                },
                {
                    "last_affected": "3.4.2"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cna_assigner": "VulDB"
}

References

Affected packages

Git / github.com/juzaweb/cms

Affected ranges

Type

GIT

Repo

https://github.com/juzaweb/cms

Events

Introduced

8df4f9fa8c93133512f8fa7d710b7ecd4bd520ff

Last affected

5c18b5af9fc18a9cca6537bb8b62fb996a33e457

Database specific

{
    "extracted_events": [
        {
            "introduced": "3.4"
        },
        {
            "last_affected": "3.4.2"
        }
    ],
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:juzaweb:cms:*:*:*:*:*:*:*:*"
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-5422.json"