High severity7.5NVD Advisory· Published Aug 17, 2023· Updated Jun 17, 2026

CVE-2023-36106

Description

An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
tech.powerjob:powerjobMaven	<= 4.3.2	—

Affected products

Powerjob/Powerjob2 versions
cpe:2.3:a:powerjob:powerjob:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:powerjob:powerjob:*:*:*:*:*:*:*:*range: <=4.3.2
- (no CPE)
ghsa-coords
pkg:maven/tech.powerjob/powerjob
Range: <= 4.3.2

Patches

Vulnerability mechanics

References

gist.github.com/tztdsb/a653b6db328199ec0f55e54b4e466415nvdThird Party AdvisoryWEB
github.com/advisories/GHSA-443m-3fr6-w8wjghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-36106ghsaADVISORY

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000