What is GHSA-9wq6-87hw-6mhc?

GHSA-9wq6-87hw-6mhc is a security advisory published by GitHub Security Advisories with Medium severity. PowerJob OpenAPIController is missing authorization

Which CVE IDs does GHSA-9wq6-87hw-6mhc cover?

GHSA-9wq6-87hw-6mhc covers the following CVE IDs: CVE-2025-11581. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9wq6-87hw-6mhc?

GHSA-9wq6-87hw-6mhc has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

Which products are affected by GHSA-9wq6-87hw-6mhc?

GHSA-9wq6-87hw-6mhc affects 1 product, including: maven/tech.powerjob:powerjob-server-starter:\u003c= 5.1.2.

GHSA-9wq6-87hw-6mhcMediumCVSS 5.3

PowerJob OpenAPIController is missing authorization

Vendor

GitHub Security Advisories

Published

October 10, 2025

Last Modified

October 27, 2025

🔗 CVE IDs covered (1)

CVE-2025-11581 →

📋 Description

A security vulnerability has been detected in PowerJob up to 5.1.2. This vulnerability affects unknown code of the file /openApi/runJob of the component OpenAPIController. Such manipulation leads to missing authorization. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

🎯 Affected products1

maven/tech.powerjob:powerjob-server-starter:<= 5.1.2

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2025-11581
https://github.com/PowerJob/PowerJob/issues/1128
https://vuldb.com/?ctiid.327903
https://vuldb.com/?id.327903
https://vuldb.com/?submit.662558
https://github.com/advisories/GHSA-9wq6-87hw-6mhc