tech.powerjob:powerjob (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package tech.powerjob:powerjob, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (7)

• CVE-2023-29924 — CVSS 9.8 (critical): PowerJob V4.3.1 is vulnerable to Incorrect Access Control that allows for remote code execution.
• CVE-2023-29926 — CVSS 9.8 (critical): PowerJob V4.3.2 has unauthorized interface that causes remote code execution.
• CVE-2023-36106 — CVSS 7.5 (high): An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the…
• CVE-2023-29923 — CVSS 5.3 (medium): PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface.
• CVE-2023-29921 — CVSS 5.3 (medium): PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create app interface.
• CVE-2025-11580 — CVSS 5.3 (medium): A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes…
• CVE-2023-29922 — CVSS 5.3 (medium): PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface.