246 matches found
dev.macula.boot:macula-boot-starter-powerjob (5.0.0-rc2), io.github.shuigedeng:taotao-cloud-starter-job-powerjob (>=2023.02, <=2023.08) +21 more potentially affected by CVE-2023-37754 via tech.powerjob:powerjob-common (>=4.0.0, <=4.3.3)
tech.powerjob:powerjob-common MAVEN version =4.0.0, =2023.02, =2.0.0-m1, =2.0.0-m1, =4.0.0, =1.1.0, =4.3.1, =4.3.0, =4.3.0, =4.3.0, =4.3.1, =4.3.1, =4.3.1, =4.3.1, =4.3.1, =4.3.3 and more Source cves: CVE-2023-37754 Source advisory: OSV:GHSA-2H26-QFXM-R3PQ...
dev.macula.boot:macula-boot-starter-powerjob (5.0.0-rc2), io.github.shuigedeng:taotao-cloud-starter-job-powerjob (>=2023.02, <=2023.08) +21 more potentially affected by CVE-2023-37754 via tech.powerjob:powerjob-common (>=4.0.0, <=4.3.3)
tech.powerjob:powerjob-common MAVEN version =4.0.0, =2023.02, =2.0.0-m1, =2.0.0-m1, =4.0.0, =1.1.0, =4.3.1, =4.3.0, =4.3.0, =4.3.0, =4.3.1, =4.3.1, =4.3.1, =4.3.1, =4.3.1, =4.3.3 and more Source cves: CVE-2023-37754 Source advisory: GHSA-2H26-QFXM-R3PQ...
Code injection in PowerJob
PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...
CVE-2023-37754
PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...
CVE-2023-37754
PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...
Command injection
PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...
CVE-2023-37754
PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...
CVE-2023-37754
PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...
CVE-2023-37754
PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...
CVE-2023-37754: Undefined Security Weakness
PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...
CVE-2023-37754
CVE-2023-37754 affects PowerJob v4.3.3. The vulnerability is a remote command execution (RCE) via the instanceId parameter in the /instance/detail endpoint. The root cause is improper validation/filtering of constructor commands in the instanceId input, enabling arbitrary code/command execution o...
PowerJob security vulnerabilities
PowerJob is an open source distributed computing and job scheduling framework that allows developers to easily schedule tasks in their applications. A command execution vulnerability exists in PowerJob version 4.3.3, which stems from the parameter instanceId of /instance/detail failing to properl...
PT-2023-26094 · Powerjob · Powerjob
Name of the Vulnerable Software and Affected Versions: PowerJob version 4.3.3 Description: A remote command execution issue was discovered, allowing exploitation via the instanceId parameter at the "/instance/detail" API endpoint. Recommendations: For PowerJob version 4.3.3, consider restricting...
CVE-2023-37754
PowerJob v4.3.3 was discovered to contain a remote command execution RCE vulnerability via the instanceId parameter at /instance/detail...
Exploit for Incorrect Default Permissions in Powerjob
CVE-2023-29923 1. Prepare a url.txt file,...
Remote Code Execution (RCE)
powerjob-server-core is vulnerable to Remote Code Execution RCE. The vulnerability exists because the library fails to implement access control, which allows an attacker to inject and execute malicious code through the template generator...
Remote Code Execution (RCE)
powerjob is vulnerable to Remote Code Execution RCE. The vulnerability exists due to the library's lack of user input validation, which allows an attacker to inject and execute malicious code...
PowerJob Access Control Error Vulnerability (CNVD-2023-32767)
PowerJob is an open source distributed computing and job scheduling framework that allows developers to easily schedule tasks in their applications. An Access Control Error vulnerability exists in PowerJob version V4.3.1 that stems from improper access control. An attacker could exploit the...