CyberRota Analysis
AI-GeneratedThe SmartAdmin v3.30.0 application has a missing authorization vulnerability in its scheduled-job management module, which allows low-privileged authenticated users to access administrative functionalities due to the lack of method-level permission checks in the AdminSmartJobController. This could lead to unauthorized actions being performed on scheduled jobs, potentially compromising the integrity of the system. Organizations using this version of SmartAdmin should prioritize remediation to prevent exploitation by malicious users.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
1024-lab SmartAdmin v3.30.0 contains a missing authorization vulnerability in the scheduled-job management module. The AdminSmartJobController exposes scheduled-job management endpoints without method-level permission checks, allowing a low-privileged authenticated user to access functionality intended for authorized administrators.