VulnerabilityDeferred

CVE-2026-44341

The application exposes a job retrieval endpoint that allows unauthenticated users to access job details by directly manipulating object identifiers.

MEDIUM 5.3EPSS 0.24%

Does this matter?

Lower severity and a low EPSS score (0.24%). Track it; it rarely justifies an emergency change on its own.

Description

GoJobs is a REST API for a Job Board platform. The application exposes a job retrieval endpoint that allows unauthenticated users to access job details by directly manipulating object identifiers. The endpoint lacks proper authentication and authorization checks, resulting in unauthorized access to job data.

CVSS 3.1: 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS: 0.24% probability · 15th percentile
CISA KEV: Not listed
Weakness: CWE-284, CWE-639
Source: security-advisories@github.com

References

https://github.com/karnop/gojobs/security/advisories/GHSA-x2j8-h9xc-wpgf
https://github.com/karnop/gojobs/security/advisories/GHSA-x2j8-h9xc-wpgf

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.