CVE-2020-28865

An issue was discovered in PowerJob through 3.2.2, allows attackers to change arbitrary user passwords via the id parameter to /appinfo/save...

CVE-2020-28865

An issue was discovered in PowerJob through 3.2.2, allows attackers to change arbitrary user passwords via the id parameter to /appinfo/save...

CVE-2020-28865

CVE-2020-28865 affects PowerJob up to version 3.2.2. A vulnerability in the /appinfo/save handler allows an attacker to change arbitrary user passwords via the id parameter, enabling password modification without authorization. The available connected documents confirm the affected software/compo...

PT-2022-8908

Name of the Vulnerable Software and Affected Versions PowerJob versions 3.2.2 and earlier Description An issue allows attackers to change arbitrary user passwords via the id parameter to "/appinfo/save" API endpoint. Recommendations For PowerJob versions 3.2.2 and earlier, as a temporary...

PowerJob security vulnerabilities

PowerJob is an open source distributed computing and job scheduling framework that allows developers to easily schedule tasks in their own applications. a security vulnerability exists in PowerJob 3.2.2 and prior versions. An attacker could exploit the vulnerability to change an arbitrary user...

CVE-2020-28865: Insufficiently Protected Credentials

An issue was discovered in PowerJob through 3.2.2, allows attackers to change arbitrary user passwords via the id parameter to /appinfo/save...