CVE-2020-28865

An issue was discovered in PowerJob through 3.2.2, allows attackers to change arbitrary user passwords via the id parameter to /appinfo/save...

CVE-2020-28865

CVE-2020-28865 affects PowerJob up to version 3.2.2. A vulnerability in the /appinfo/save handler allows an attacker to change arbitrary user passwords via the id parameter, enabling password modification without authorization. The available connected documents confirm the affected software/compo...