Powerjob Powerjob vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Powerjob Powerjob: 3 record(s), with affected versions and fixes.cpe:2.3:a:powerjob:powerjob
CVE-2025-14518
Critical · 9.8
CWE-918 Dec 11, 2025
PowerJob Network Request PingPongUtils.java checkConnectivity server-side request forgery
A vulnerability was identified in PowerJob up to 5.1.2. This vulnerability affects the function checkConnectivity of the file src/main/java/tech/powerjob/common/utils/net/PingPongUtils.java of the component Network Request Handler. The manipulation of the argument targetIp/targetPort leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
CVE-2025-11581
High · 7.5
CWE-862 Oct 10, 2025
PowerJob OpenAPIController runJob authorization
A security vulnerability has been detected in PowerJob up to 5.1.2. This vulnerability affects unknown code of the file /openApi/runJob of the component OpenAPIController. Such manipulation leads to missing authorization. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
CVE-2025-11580
Medium · 5.3
CWE-862 Oct 10, 2025
PowerJob list authorization
A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes missing authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.