~ / search / GHSA-443m-3fr6-w8wj

GHSA-443m-3fr6-w8wj

PowerJob incorrect access control vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2023-36106

Packages

EcosystemPackageAffectedFixed in
Maven tech.powerjob:powerjob <= 4.3.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via `appId` parameter to `/container/list`.

References

External links from the advisory. They lead to third-party sites.