CVE-2023-37754
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
PowerJob是一个开源分布式计算和作业调度框架，它允许开发人员在自己的应用程序中轻松调度任务。 PowerJob 4.3.3版本存在安全漏洞，该漏洞源于参数instanceId存在远程命令执行（RCE）漏洞。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-37754
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
PowerJob v4.3.3 was discovered to contain a remote command execution (RCE) vulnerability via the instanceId parameter at /instance/detail.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
PowerJob 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PowerJob是一个开源分布式计算和作业调度框架，它允许开发人员在自己的应用程序中轻松调度任务。 PowerJob 4.3.3版本存在安全漏洞，该漏洞源于参数instanceId存在远程命令执行（RCE）漏洞。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2023-37754
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-37754
请登录查看更多情报信息。
Security Blog Posts for CVE-2023-37754 (1)
Other References for CVE-2023-37754 (1)
Same Patch Batch · n/a · 2023-07-28 · 22 CVEs total
| CVE-2023-3988 | 6.3 MEDIUM | Cafe Billing System Order index.php sql injection |
| CVE-2023-39015 | WebMagic 代码注入漏洞 | |
| CVE-2023-38988 | jeesite 安全漏洞 | |
| CVE-2023-31932 | Rail Pass Management System SQL注入漏洞 | |
| CVE-2023-31933 | Rail Pass Management System SQL注入漏洞 | |
| CVE-2023-31934 | Rail Pass Management System 跨站脚本漏洞 | |
| CVE-2023-31935 | Rail Pass Management System 跨站脚本漏洞 | |
| CVE-2023-31936 | Rail Pass Management System SQL注入漏洞 | |
| CVE-2023-31937 | Rail Pass Management System SQL注入漏洞 | |
| CVE-2023-38992 | Jeecg-Boot SQL注入漏洞 | |
| CVE-2023-39010 | BoofCV 代码注入漏洞 | |
| CVE-2023-39013 | Duke 代码注入漏洞 | |
| CVE-2023-39016 | bboss 代码注入漏洞 | |
| CVE-2023-39017 | Terracotta Quartz Scheduler 代码注入漏洞 | |
| CVE-2023-39018 | FFmpeg 代码注入漏洞 | |
| CVE-2023-39020 | Stanford CoreNlp 代码注入漏洞 | |
| CVE-2023-39021 | Wix Embedded MySql 代码注入漏洞 | |
| CVE-2023-39022 | Ericsson OSCORE 代码注入漏洞 | |
| CVE-2023-39023 | University Compass 代码注入漏洞 | |
| CVE-2022-31454 | Yii 跨站脚本漏洞 |
Showing top 20 of 22 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
-
CVE-2026-108958
TensorLayer HDF5 Loading utils.py load_hdf5_graph deserializ -
CVE-2026-108836
Ollama Pull API name.go IsValid server-side request forgery -
CVE-2026-108829
Zen Cart Module Configuration modules.php sql injection -
CVE-2026-108828
Zen Cart Admin Panel configuration.php eval sql injection -
CVE-2026-108827
Zen Cart Administrative Module Management general.php zen_ca
V. Comments for CVE-2023-37754
No comments yet