Lucene search

GoogleOSV:CVE-2023-27087

HistoryMar 21, 2023 - 7:15 p.m.

CVE-2023-27087

2023-03-2119:15:11

Google

osv.dev

xuxuei xxl-job

permission

vulnerability

cve-2023-27087

sensitive information

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.6%

JSON

Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v 2.3.0 and v.2.3.1 allows attacker to obtain sensitive information via the pageList parameter.

CPENameOperatorVersion
xxl-jobeq1.3.2
xxl-jobeq1.5.0
xxl-jobeq1.9.2
xxl-jobeq1.9.0
xxl-jobeq1.0.0.0
xxl-jobeq1.5.1
xxl-jobeq2.0.2
xxl-jobeq1.6.1
xxl-jobeq1.4.0
xxl-jobeq2.2.0

Name	Operator	Version
xxl-job	eq	1.3.2
xxl-job	eq	1.5.0
xxl-job	eq	1.9.2
xxl-job	eq	1.9.0
xxl-job	eq	1.0.0.0
xxl-job	eq	1.5.1
xxl-job	eq	2.0.2
xxl-job	eq	1.6.1
xxl-job	eq	1.4.0
xxl-job	eq	2.2.0

Rows per page:

1-10 of 281

References

github.com/xuxueli/xxl-job/issues/3096

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.6%

JSON

Related for OSV:CVE-2023-27087