Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-67082
HistoryAug 03, 2023 - 12:00 a.m.

PowerJob Command Execution Vulnerability

2023-08-0300:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
powerjob
command execution
vulnerability
version 4.3.3
arbitrary
parameter
instanceid
/instance/detail
constructor command special characters
unchecked

0.004 Low

EPSS

Percentile

73.4%

PowerJob is an open source distributed computing and job scheduling framework that allows developers to easily schedule tasks in their applications. A command execution vulnerability exists in PowerJob version 4.3.3, which stems from the parameter instanceId of /instance/detail failing to properly filter constructor command special characters, commands, and so on. An attacker could use this vulnerability to cause arbitrary command execution.

CPENameOperatorVersion
powerjob powerjobeq4.3.3

0.004 Low

EPSS

Percentile

73.4%