PowerJob incorrect access control vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-36106 · ADVISORY
• gist.github.com/tztdsb/a653b6db328199ec0f55e54b4e466415 · WEB
• gitee.com/KFCFans/PowerJob · PACKAGE

tech.powerjob:powerjob のその他の脆弱性

• CVE-2025-11580中 5.3A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes miss…
• CVE-2023-29924緊急 9.8PowerJob V4.3.1 is vulnerable to Incorrect Access Control that allows for remote code execution.
• CVE-2023-29926緊急 9.8PowerJob V4.3.2 has unauthorized interface that causes remote code execution.
• CVE-2023-29922中 5.3PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface.
• CVE-2023-29923中 5.3PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface.