Advisory Weakness Curation

Improper Access Control in activejob A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have.

Deserialization of Untrusted Data A Broken Access Control vulnerability in Active Job

Deserialization of Untrusted Data A Broken Access Control vulnerability in Active Job allows attackers to craft user input which, when deserialized through Active Job, could give them access to information that they should not have.