Description
PowerJob v4.3.3 was discovered to contain a remote command execution (RCE) vulnerability via the instanceId parameter at /instance/detail.
Remediation
References
https://github.com/PowerJob/PowerJob/
https://github.com/PowerJob/PowerJob/issues/675
https://novysodope.github.io/2023/07/02/100/
Related Vulnerabilities
CVE-2021-23330 Vulnerability in npm package launchpad
CVE-2019-16728 Vulnerability in maven package org.webjars.bowergithub.cure53:dompurify
CVE-2021-32831 Vulnerability in npm package total.js
CVE-2019-11818 Vulnerability in maven package org.opencms:org.opencms.workplace.tools.accounts
CVE-2023-3691 Vulnerability in maven package org.webjars:layui