CVE-2023-37272 (jobscheduler) | allinfosecnews.com

July 13, 2023, 11:15 p.m. |

National Vulnerability Database web.nvd.nist.gov

JS7 is an Open Source Job Scheduler. Users specify file names when uploading files holding user-generated documentation for JOC Cockpit. Specifically crafted file names allow an XSS attack to inject code that is executed with the browser. Risk of the vulnerability is considered high for branch 1.13 of JobScheduler (JS1). The vulnerability does not affect branch 2.x of JobScheduler (JS7) for releases after 2.1.0. The vulnerability is resolved with release 1.13.19.

attack browser cockpit code cve documentation file files generated high inject job names open source risk scheduler vulnerability xss

More from web.nvd.nist.gov / National Vulnerability Database

CVE-2023-45955 (lightstrip_firmware) 6 months, 1 week ago | web.nvd.nist.gov

attackers cve denial of service issue +1

CVE-2023-40101 (android) 6 months, 1 week ago | web.nvd.nist.gov

android check collapse cve +7

CVE-2023-21377 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bypass cve disclosure +8

CVE-2023-21380 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bluetooth buffer buffer overflow +9

CVE-2023-21382 (android) 6 months, 1 week ago | web.nvd.nist.gov

access android check cve +11

CVE-2023-21381 (android) 6 months, 1 week ago | web.nvd.nist.gov

android arbitrary code code code execution +10

CVE-2023-21385 (android) 6 months, 1 week ago | web.nvd.nist.gov

android corruption cve disclosure +7

CVE-2023-21387 (android) 6 months, 1 week ago | web.nvd.nist.gov

android backup bypass cve +11

CVE-2023-21389 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bypass check cve +10

G230ISSO2 - Mid Level Information System Security Officer - Cleared

@ NiSUS Technologies | Annapolis Junction, Maryland, United States

View on infosec-jobs.com

Security Incident Response Engineer

@ Oracle | JALISCO, Mexico

View on infosec-jobs.com

Security Compliance Specialist

@ Cloudflare, Inc. | Hybrid or Remote

View on infosec-jobs.com

Senior Security DevOps

@ SAP | Sofia, BG, 1407

View on infosec-jobs.com

Senior Cyber Security Engineer

@ Node.Digital | Dulles, Virginia, United States

View on infosec-jobs.com

Manager, Data Insights and Forensics

@ Kroll | New York City, United States

View on infosec-jobs.com