Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1jNm14LTNmajktOWo3cc4AAy69

PowerJob vulnerable to incorrect access control

PowerJob V4.3.1 is vulnerable to Incorrect Access Control that allows for remote code execution.

Permalink: https://github.com/advisories/GHSA-c6mx-3fj9-9j7q
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jNm14LTNmajktOWo3cc4AAy69
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Critical
Classification: General
Published: about 1 year ago
Updated: 6 months ago

CVSS Score: 9.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Identifiers: GHSA-c6mx-3fj9-9j7q, CVE-2023-29924
References:

• https://nvd.nist.gov/vuln/detail/CVE-2023-29924
• https://github.com/PowerJob/PowerJob/issues/588
• https://iotaa.cn/articles/62
• https://github.com/advisories/GHSA-c6mx-3fj9-9j7q

Repository: https://github.com/PowerJob/PowerJob
Blast Radius: 1.0

Affected Packages