PowerJob incorrect access control vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2023-36106 · ADVISORY
• gist.github.com/tztdsb/a653b6db328199ec0f55e54b4e466415 · WEB
• gitee.com/KFCFans/PowerJob · PACKAGE

Lỗ hổng khác của tech.powerjob:powerjob

• CVE-2025-11580TRUNG BÌNH 5.3A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes miss…
• CVE-2023-29924NGHIÊM TRỌNG 9.8PowerJob V4.3.1 is vulnerable to Incorrect Access Control that allows for remote code execution.
• CVE-2023-29926NGHIÊM TRỌNG 9.8PowerJob V4.3.2 has unauthorized interface that causes remote code execution.
• CVE-2023-29922TRUNG BÌNH 5.3PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface.
• CVE-2023-29923TRUNG BÌNH 5.3PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface.