CVE-2020-28865: Powerjob

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue was discovered in PowerJob through 3.2.2, allows attackers to change arbitrary user passwords via the id parameter to /appinfo/save.

Affected products

• Powerjob Powerjob: up to and including 3.2.2

Published 2022-06-16. Last modified 2026-06-17.