CVE-2026-44341 Details

An insecure direct object reference vulnerability has been identified in GoJobs, a REST API for a job board platform. This vulnerability allows unauthenticated users to access job details by manipulating object identifiers. The job retrieval endpoint lacks proper authentication and authorization checks, leading to unauthorized access to job data. The issue affects all versions of the application.

To address this vulnerability, it is recommended to require authentication for accessing job details, implement authorization checks based on user roles or ownership, avoid direct exposure of sequential object identifiers, consider using indirect references such as UUIDs, and implement rate limiting to prevent enumeration.