CVE-2023-37754

Description

PowerJob v4.3.3 was discovered to contain a remote command execution (RCE) vulnerability via the instanceId parameter at /instance/detail.

How to fix CVE-2023-37754

No fixed version has been published yet. Mitigate by removing the affected package or applying upstream guidance from the references below.

• Maven/tech.powerjob:powerjob-common—no fix listed

Is CVE-2023-37754 being exploited?

Likely — EPSS is 60.9%, placing CVE-2023-37754 in the top tier of vulnerabilities by exploitation probability. Prioritise patching.

Affected packages (1)

• from 0, <= 4.3.3

CVSS scores

References (4)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2023-37754
• PATCHgithub.com/PowerJob/PowerJob
• WEBgithub.com/PowerJob/PowerJob/issues/675
• WEBnovysodope.github.io/2023/07/02/100