Lucene search

K
osvGoogleOSV:GHSA-PQQJ-299W-WF53
HistoryMay 24, 2022 - 5:27 p.m.

xxl-job Multiple cross-site scripting (XSS) vulnerabilities

2022-05-2417:27:18
Google
osv.dev
4
xxl-job v2.2.0
xss vulnerabilities
appname
addresslist
jobgroupcontroller.java
remote attackers

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

43.8%

Multiple cross-site scripting (XSS) vulnerabilities in xxl-job v2.2.0 allow remote attackers to inject arbitrary web script or HTML via (1) AppName and (2)AddressList parameter in JobGroupController.java file.

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

43.8%

Related for OSV:GHSA-PQQJ-299W-WF53