Lucene search

K
osvGoogleOSV:GHSA-V3C9-W6G2-HJG3
HistoryMay 24, 2022 - 12:00 a.m.

Cross-Site Request Forgery in XXL-Job

2022-05-2400:00:18
Google
osv.dev
6
csrf xxl-job administratorcreate_security issue

EPSS

0.001

Percentile

43.4%

A Cross-Site Request Forgery (CSRF) in XXL-Job v2.3.0 allows attackers to arbitrarily create administrator accounts via the component /gaia-job-admin/user/add.

EPSS

0.001

Percentile

43.4%

Related for OSV:GHSA-V3C9-W6G2-HJG3