| Título | PowerJob ≤ 5.1.2 CWE-862 |
|---|
| Descripción | PowerJob ≤ 5.1.2 has multiple unauthenticated endpoints under OpenAPIController. Below I briefly describe the discovery process and demonstrate unauthenticated exploitation using the /openApi/runJob endpoint as an example. |
|---|
| Fuente | ⚠️ https://github.com/PowerJob/PowerJob/issues/1128 |
|---|
| Usuario | ez-lbz (UID 87033) |
|---|
| Sumisión | 2025-09-25 16:55 (hace 7 meses) |
|---|
| Moderación | 2025-10-10 13:42 (15 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 327903 [PowerJob hasta 5.1.2 OpenAPIController /openApi/runJob escalada de privilegios] |
|---|
| Puntos | 16 |
|---|