| Package | Affected versions | Patched versions |
|---|---|---|
| jobscheduler | ≥ 1.12.0, ≤ 1.12.12≥ 1.13.0, ≤ 1.13.3 |
A vulnerability based on insecure user/password encryption in the JOE (job editor) component of SOS JobScheduler 1.12 and 1.13 allows attackers to decrypt the user/password that is optionally stored with a user's profile.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free