~ / search / GHSA-87xj-ghmc-c3xq

GHSA-87xj-ghmc-c3xq

PowerJob has Missing Authorization in its /user/list file

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-11580

Packages

EcosystemPackageAffectedFixed in
Maven tech.powerjob:powerjob <= 5.1.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes missing authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

References

External links from the advisory. They lead to third-party sites.