GitHub Advisoryadvisory · Maven

GHSA-9wq6-87hw-6mhc PowerJob OpenAPIController is missing authorization

MEDIUM Published 2025-10-10 Modified 2025-10-27 Official page ↗
Aliases
CVE-2025-11581
Ecosystem
Maven
Packages
tech.powerjob:powerjob-server-starter
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-862
Reviewed
2025-10-27

Affected packages

• Maven tech.powerjob:powerjob-server-starter: <= 5.1.2 (no fix yet)

Description

A security vulnerability has been detected in PowerJob up to 5.1.2. This vulnerability affects unknown code of the file /openApi/runJob of the component OpenAPIController. Such manipulation leads to missing authorization. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

Related

Alias · CVE (1)

  • CVE-2025-11581 A security vulnerability has been detected in PowerJob up to 5.1.2. vulnerability

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References