CVE-2025-11580 PoC — PowerJob 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-11580.yaml

Associated Vulnerability

Title:PowerJob 安全漏洞 (CVE-2025-11580)
Description:PowerJob是PowerJob开源的一个开源分布式计算和作业调度框架，它允许开发人员在自己的应用程序中轻松调度任务。 PowerJob 5.1.2及之前版本存在安全漏洞，该漏洞源于文件/user/list中的函数列表缺少授权检查，可能导致远程攻击。

Description

PowerJob = 5.1.2 contains a broken access control caused by missing authorization in /user/list function, letting remote attackers access unauthorized resources, exploit requires no special privileges.

File Snapshot


 id: CVE-2025-11580

info:
  name: PowerJob List - Authorization Bypass
  author: DhiyaneshDk
  sever

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!