Description
PowerJob v4.3.3 was discovered to contain a remote command execution (RCE) vulnerability via the instanceId parameter at /instance/detail.
Remediation
References
https://github.com/PowerJob/PowerJob/
https://github.com/PowerJob/PowerJob/issues/675
https://novysodope.github.io/2023/07/02/100/
Related Vulnerabilities
CVE-2022-25857 Vulnerability in maven package org.yaml:snakeyaml
CVE-2023-3620 Vulnerability in npm package tarteaucitronjs
CVE-2018-1000529 Vulnerability in maven package org.grails.plugins:fields
CVE-2022-1291 Vulnerability in maven package org.webjars.npm:tableexport.jquery.plugin
CVE-2020-7611 Vulnerability in maven package io.micronaut:micronaut-http-client