Remote Code Execution (RCE)

2023-08-0209:02:09

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

remote code execution

vulnerability

input validation

instancedetail

malicious code

system security

0.003 Low

EPSS

Percentile

68.4%

JSON

tech.powerjob:powerjob-common is vulnerable to Remote Code Execution (RCE). Lack of proper validation of user inputs through the instanceId parameter of InstanceDetail.java allows an attacker to upload and execute malicious code on the system.

CPENameOperatorVersion
powerjob-commonle4.3.3
powerjob-commonle4.3.3

CPE	Name	Operator	Version
	powerjob-common	le	4.3.3
	powerjob-common	le	4.3.3

References

github.com/advisories/GHSA-2h26-qfxm-r3pq

github.com/PowerJob/PowerJob/

github.com/PowerJob/PowerJob/blob/v4.3.3/powerjob-common/src/main/java/tech/powerjob/common/model/InstanceDetail.java

github.com/PowerJob/PowerJob/issues/675

novysodope.github.io/2023/07/02/100/

0.003 Low

EPSS

Percentile

68.4%

JSON

Related for VERACODE:41945