CVE-2020-28865

2022-06-1621:15:07

Google

osv.dev

0.001 Low

EPSS

Percentile

31.8%

JSON

An issue was discovered in PowerJob through 3.2.2, allows attackers to change arbitrary user passwords via the id parameter to /appinfo/save.

CPENameOperatorVersion
powerjobeq3.0.1
powerjobeq3.1.0
powerjobeq1.2.1
powerjobeq3.2.2
powerjobeq1.1.0
powerjobeq1.2.0
powerjobeq3.1.3
powerjobeq3.1.2
powerjobeq3.1.1
powerjobeq1.0.0

Name	Operator	Version
powerjob	eq	3.0.1
powerjob	eq	3.1.0
powerjob	eq	1.2.1
powerjob	eq	3.2.2
powerjob	eq	1.1.0
powerjob	eq	1.2.0
powerjob	eq	3.1.3
powerjob	eq	3.1.2
powerjob	eq	3.1.1
powerjob	eq	1.0.0

Rows per page:

1-10 of 161

References

github.com/KFCFans/PowerJob/issues/99

0.001 Low

EPSS

Percentile

31.8%

JSON

Related for OSV:CVE-2020-28865