Description
A security vulnerability has been detected in PowerJob up to 5.1.2. This vulnerability affects unknown code of the file /openApi/runJob of the component OpenAPIController. Such manipulation leads to missing authorization. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | PowerJob | 5.1.0, 5.1.1, 5.1.2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | tech.powerjob:powerjob-server-starter | <= 5.1.2 | — | GHSA-9wq6-87hw-6mhc |
References
- VDB-327903 | PowerJob OpenAPIController runJob authorization vdb-entry technical-description
- VDB-327903 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #662558 | PowerJob ≤ 5.1.2 CWE-862 third-party-advisory
- https://github.com/PowerJob/PowerJob/issues/1128 exploit issue-tracking
- https://github.com/PowerJob/PowerJob/ product