PT-2023-12401 · Unknown+1 · Trampgeek Jobe+1

Jobe + 1 · Published 2022-08-26 · Updated 2025-05-28 · CVE-2021-4297

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions trampgeek jobe versions 1.6.4 and earlier

Description A vulnerability has been found in the function runs post of the file application/controllers/Restapi.php. The manipulation of the argument sourcefilename leads to an unknown weakness.

Recommendations For versions 1.6.4 and earlier, upgrade to version 1.6.5 to address this issue. As a temporary workaround, consider restricting the manipulation of the sourcefilename argument in the runs post function until the upgrade is applied.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

ALT-PU-2022-2503

ALT-PU-2022-2554

CVE-2021-4297

Affected Products

Alt Linux

Trampgeek Jobe

References · 9

• https://github.com/trampgeek/jobe/commit/694da5013dbecc8d30dd83e2a83e78faadf93771 · Patch
• https://github.com/trampgeek/jobe/issues/46 · Patch
• https://osv.dev/vulnerability/CVE-2021-4297 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-4297 · Security Note
• https://vuldb.com/?id.217174 · Note
• https://t.me/cvenotify/123847 · Telegram Post
• https://t.me/cibsecurity/55730 · Telegram Post
• https://t.me/cvenotify/41607 · Telegram Post
• https://vuldb.com/?ctiid.217174 · Note