/Vulnerability Library

PowerJob List - Authorization Bypass

CVE-2025-11580
Verified

Description

PowerJob = 5.1.2 contains a broken access control caused by missing authorization in /user/list function, letting remote attackers access unauthorized resources, exploit requires no special privileges.

Severity

Medium

Affected Product

powerjob

Published Date

January 21, 2026

Template Author

dhiyaneshdk

CVE-2025-11580.yaml
5.0Severity

CVSS Metrics

References

https://github.com/PowerJob/PowerJob/issues/1127https://nvd.nist.gov/vuln/detail/CVE-2025-11580

Remediation Steps

Update to the latest version beyond 5.1.2.