Remote Code Execution (RCE)

2023-05-1604:21:51

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

remote code execution

powerjob

user input validation

malicious code injection

0.003 Low

EPSS

Percentile

69.1%

JSON

powerjob is vulnerable to Remote Code Execution (RCE). The vulnerability exists due to the library’s lack of user input validation, which allows an attacker to inject and execute malicious code.

CPENameOperatorVersion
powerjoble4.3.2
powerjoble4.3.2

CPE	Name	Operator	Version
	powerjob	le	4.3.2
	powerjob	le	4.3.2

References

github.com/advisories/GHSA-9mh9-44q3-v79x

iotaa.cn/articles/63

0.003 Low

EPSS

Percentile

69.1%

JSON

Related for VERACODE:40537