CVE-2025-11581: PowerJob OpenAPIController runJob authorization
A security vulnerability has been detected in PowerJob up to 5.1.2. This vulnerability affects unknown code of the file /openApi/runJob of the component OpenAPIController. Such manipulation leads to missing authorization. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11581?
CVE-2025-11581 is considered a critical vulnerability due to its potential for remote exploitation and unauthorized access.
What components are affected by CVE-2025-11581?
CVE-2025-11581 affects the OpenAPIController component in PowerJob versions up to 5.1.2.
How do I fix CVE-2025-11581?
To mitigate CVE-2025-11581, upgrade PowerJob to a version later than 5.1.2 that addresses the missing authorization issue.
Can CVE-2025-11581 be exploited remotely?
Yes, CVE-2025-11581 can be exploited remotely, allowing attackers to manipulate components without authorization.
What is the main impact of CVE-2025-11581?
The main impact of CVE-2025-11581 is unauthorized access to sensitive operations through the vulnerable OpenAPIController.