GitHub Advisoryadvisory · Maven
GHSA-c23v-vqw5-52c5 PowerJob vulnerable to Incorrect Access Control via the create user/save interface.
MEDIUM
Official page ↗
- Aliases
- CVE-2023-29922
- Ecosystem
- Maven
- Packages
- tech.powerjob:powerjob
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- Weaknesses
- CWE-284
- Reviewed
- 2023-04-20
Affected packages
• Maven tech.powerjob:powerjob: <= 4.3.9 (no fix yet)
Description
PowerJob v4.9.3 is vulnerable to Incorrect Access Control via the create user/save interface.
Related
Alias · CVE (1)
- CVE-2023-29922 PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface. vulnerability
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness