7 matches found
EUVD-2026-54152
Frappe is a full-stack web application framework. Prior to 16.18.0, the Workspace Save API accepts a controlled workspace identifier from any authenticated user without enforcing workspace ownership, allowing modification of another user's private workspace and persistent script injection. This...
distributed computing platforms and Unauthorized Access
The vulnerability of distributed computing platforms and the PowerJob task scheduling system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to the user/save interface...
GHSA-C23V-VQW5-52C5 PowerJob vulnerable to Incorrect Access Control via the create user/save interface.
PowerJob v4.9.3 is vulnerable to Incorrect Access Control via the create user/save interface...
Improper access control
PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface...
PT-2023-6717
Name of the Vulnerable Software and Affected Versions PowerJob version 4.3.1 Description The issue is related to insufficient access control in the PowerJob platform, which can be exploited by a remote attacker to gain unauthorized access to the user/save interface. This can occur via the create...
CVE-2023-29922
PowerJob V4.3.1 is affected by an Incorrect Access Control vulnerability in the create user/save interface. The root cause is insufficient authorization checks on the /user/save flow, potentially allowing an attacker to bypass authentication and perform unauthorized user creation. Documented deta...
