CVE-2025-11580

Katalog CVE

CVSS 5.3 · Medium EPSS 1,1%

Kerentanan Missing Authorization pada powerjob. Skor CVSS 3.1 5.3 (Medium) menurut vuldb.com.

Deskripsi (NVD)

A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes missing authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.

Rincian

Terbit di NVD

10 Oktober 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber vuldb.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-862: Missing Authorization
CWE-863: Incorrect Authorization

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 64,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/PowerJob/PowerJob/issues/1127 issue tracking · advisory pihak ketiga
• https://vuldb.com/?id.327902 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.662446 advisory pihak ketiga · vdb entry
• https://github.com/PowerJob/PowerJob/
• https://vuldb.com/?ctiid.327902 permissions required · vdb entry