Code injection in PowerJob

CRITICO 9.8CVE-2023-37754 · GHSA-2h26-qfxm-r3pq · Published 28/07/2023 · updated 17/06/2026

In breve

CVE-2023-37754 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda tech.powerjob:powerjob-common, powerjob (powerjob).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 30.0%, superiore al 98.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
tech.powerjob:powerjob-common Maven	`≤ 4.3.3`	No fix yet
powerjob powerjob	`= 4.3.3`	No fix yet

PowerJob v4.3.3 was discovered to contain a remote command execution (RCE) vulnerability via the instanceId parameter at /instance/detail.

NVD description

PowerJob v4.3.3 was discovered to contain a remote command execution (RCE) vulnerability via the instanceId parameter at /instance/detail.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.