Arbitrary Code Injection

Overview tech.powerjob:powerjob-server-core is an enterprise job scheduling middleware with distributed computing ability Affected versions of this package are vulnerable to Arbitrary Code Injection via the GroovyEvaluator.evaluate function in the /openApi/addWorkflowNode endpoint when processing...

Remote Code Execution (RCE)

powerjob-server-core is vulnerable to Remote Code Execution RCE. The vulnerability exists because the library fails to implement access control, which allows an attacker to inject and execute malicious code through the template generator...