CVE-2026-44341

Summary

GoJobs is a REST API for a Job Board platform. The application exposes a job retrieval endpoint that allows unauthenticated users to access job details by directly manipulating object identifiers. The endpoint lacks proper authentication and authorization checks, resulting in unauthorized access to job data.

Affected Software

VendorProductVersion RangeStatus
karnopgojobs<= 2cc74a78dcf101c089ea209f2aaefef0674f6b55affected

Weaknesses

  • CWE-284: CWE-284: Improper Access Control
  • CWE-639: CWE-639: Authorization Bypass Through User-Controlled Key

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: yes
    • Technical Impact: partial

Additional References

References