Lucene search

K
osvGoogleOSV:CVE-2022-29002
HistoryMay 23, 2022 - 9:16 p.m.

CVE-2022-29002

2022-05-2321:16:04
Google
osv.dev
2

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.6%

A Cross-Site Request Forgery (CSRF) in XXL-Job v2.3.0 allows attackers to arbitrarily create administrator accounts via the component /gaia-job-admin/user/add.

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.6%