Description
An issue was discovered in PowerJob through 3.2.2, allows attackers to change arbitrary user passwords via the id parameter to /appinfo/save.
Remediation
References
https://github.com/KFCFans/PowerJob/issues/99
Related Vulnerabilities
CVE-2023-23936 Vulnerability in npm package undici
CVE-2021-44548 Vulnerability in maven package org.apache.solr:solr-core
CVE-2021-25931 Vulnerability in maven package org.opennms:opennms-webapp
CVE-2023-37908 Vulnerability in maven package org.xwiki.rendering:xwiki-rendering-xml
CVE-2021-37136 Vulnerability in maven package io.netty:netty-codec