What is GHSA-443m-3fr6-w8wj?

GHSA-443m-3fr6-w8wj is a security advisory published by GitHub Security Advisories with High severity. PowerJob incorrect access control vulnerability

Which CVE IDs does GHSA-443m-3fr6-w8wj cover?

GHSA-443m-3fr6-w8wj covers the following CVE IDs: CVE-2023-36106. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-443m-3fr6-w8wj?

GHSA-443m-3fr6-w8wj has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-443m-3fr6-w8wj?

GHSA-443m-3fr6-w8wj affects 1 product, including: maven/tech.powerjob:powerjob:\u003c= 4.3.2.

GHSA-443m-3fr6-w8wjHighCVSS 7.5

PowerJob incorrect access control vulnerability

Vendor

GitHub Security Advisories

Published

August 17, 2023

Last Modified

October 9, 2024

🔗 CVE IDs covered (1)

CVE-2023-36106 →

📋 Description

An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list.

🎯 Affected products1

maven/tech.powerjob:powerjob:<= 4.3.2

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2023-36106
https://gist.github.com/tztdsb/a653b6db328199ec0f55e54b4e466415#file-gistfile1-txt
https://gitee.com/KFCFans/PowerJob
https://github.com/advisories/GHSA-443m-3fr6-w8wj