| Title | http://www.powerjob.tech/,https://github.com/PowerJob/PowerJob powerjob <=4.3.9 There is an arbitrary user login vulnerability in the PowerJob s |
|---|
| Description | /system/overview?appId=2 contains the version information of the current website (some versions require logging in to access)
The account information is leaked in the /appInfo/list? and /user/list directories, and then the return package can be modified to enable any user to log in. |
|---|
| Source | ⚠️ https://www.yuque.com/yuqueyonghunhj6tg/ygf5oy/nmop8w5rc4m4zkwc |
|---|
| User | XbnWa (UID 69502) |
|---|
| Submission | 05/23/2024 13:57 (2 years ago) |
|---|
| Moderation | 05/25/2024 08:24 (2 days later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 237460 [powerjob up to 4.3.2 /container/list appId information disclosure] |
|---|
| Points | 0 |
|---|