A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes missing authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.
An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list.
PowerJob v4.3.6 is vulnerable to Incorrect Access Control that allows for remote code execution.
PowerJob V4.3.2 has unauthorized interface that causes remote code execution.
PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface.
PowerJob v4.9.3 is vulnerable to Incorrect Access Control via the create user/save interface.
PowerJob v4.3.6 is vulnerable to Incorrect Access Control via the create app interface.