CVE-2026-44341

{
  "id": "CVE-2026-44341",
  "sourceIdentifier": "[email protected]",
  "published": "2026-05-12T23:16:18.197",
  "lastModified": "2026-10-26T18:10:00.173",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "GoJobs is a REST API for a Job Board platform. The application exposes a job retrieval endpoint that allows unauthenticated users to access job details by directly manipulating object identifiers. The endpoint lacks proper authentication and authorization checks, resulting in unauthorized access to job data."
    },
    {
      "lang": "es",
      "value": "GoJobs es una API REST para una plataforma de bolsa de trabajo. La aplicación expone un endpoint de recuperación de trabajos que permite a usuarios no autenticados acceder a los detalles del empleo manipulando directamente los identificadores de objeto. El endpoint carece de controles adecuados de autenticación y autorización, lo que resulta en acceso no autorizado a los datos del empleo."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "karnop",
          "product": "gojobs",
          "versions": [
            {
              "version": "<= 2cc74a78dcf101c089ea209f2aaefef0674f6b55",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-05-13T14:31:58.461031Z",
          "id": "CVE-2026-44341",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        },
        {
          "lang": "en",
          "value": "CWE-639"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/karnop/gojobs/security/advisories/GHSA-x2j8-h9xc-wpgf",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/karnop/gojobs/security/advisories/GHSA-x2j8-h9xc-wpgf",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}