Design/Logic Flaw

2020-12-2706:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

35.3%

JSON

XXL-JOB 2.2.0 allows Stored XSS (in Add User) to bypass the 20-character limit via xxl-job-admin/src/main/java/com/xxl/job/admin/controller/UserController.java.

CPENameOperatorVersion
xxl-jobeq2.2.0

CPE	Name	Operator	Version
	xxl-job	eq	2.2.0

References

github.com/xuxueli/xxl-job/issues/2083

0.001 Low

EPSS

Percentile

35.3%

JSON

Related for PRION:CVE-2020-29204