CVE-2025-14518 MEDIUM

CVE-2025-14518: PowerJob Network Request PingPongUtils.java checkConnectivity server-side request forgery

Vendor N/A
Product PowerJob
Weakness CWE-918 · SSRF
Published December 11, 2025
Last update February 24, 2026

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

Description

A vulnerability was identified in PowerJob up to 5.1.2. This vulnerability affects the function checkConnectivity of the file src/main/java/tech/powerjob/common/utils/net/PingPongUtils.java of the component Network Request Handler. The manipulation of the argument targetIp/targetPort leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Key dates

Disclosure timeline

December 11, 2025 CVE published
February 24, 2026 Record updated