CVE-2022-29002

A Cross-Site Request Forgery CSRF in XXL-Job v2.3.0 allows attackers to arbitrarily create administrator accounts via the component /gaia-job-admin/user/add...

PT-2022-19357

Name of the Vulnerable Software and Affected Versions XXL-Job version 2.3.0 Description A Cross-Site Request Forgery CSRF issue allows attackers to create administrator accounts via the "/gaia-job-admin/user/add" API endpoint. This enables attackers to gain unauthorized access to the system...

CVE-2022-29002: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in XXL-Job v2.3.0 allows attackers to arbitrarily create administrator accounts via the component /gaia-job-admin/user/add...