Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-44341 EUVD-2026-29881

GoJobs: Insecure Direct Object Reference (IDOR) in Job Retrieval Endpoint

Published May 12, 2026 · Updated May 13, 2026 · Assigned by GitHub_M

Description

GoJobs is a REST API for a Job Board platform. The application exposes a job retrieval endpoint that allows unauthenticated users to access job details by directly manipulating object identifiers. The endpoint lacks proper authentication and authorization checks, resulting in unauthorized access to job data.

Affected products

VendorProductAffectedFixed
karnop gojobs <= 2cc74a78dcf101c089ea209f2aaefef0674f6b55 —

References