Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 5:39 a.m.2 views

CVE-2023-0674

A vulnerability, which was classified as problematic, has been found in XXL-JOB 2.3.1. Affected by this issue is some unknown functionality of the file /user/updatePwd of the component New Password Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely...

6.5CVSS4.6AI score0.00111EPSS
Exploits1References1
OSV
OSV
added 2023/02/04 9:30 a.m.15 views

GHSA-PV4M-H859-JWMQ Cross-Site Request Forgery in XXL Job

A vulnerability, which was classified as problematic, has been found in XXL-JOB 2.3.1. Affected by this issue is some unknown functionality of the file /user/updatePwd of the component New Password Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely...

6.5CVSS6.4AI score0.00111EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2023/02/04 9:30 a.m.13 views

Cross-Site Request Forgery in XXL Job

A vulnerability, which was classified as problematic, has been found in XXL-JOB 2.3.1. Affected by this issue is some unknown functionality of the file /user/updatePwd of the component New Password Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely...

6.5CVSS6.3AI score0.00111EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2023/02/04 8:15 a.m.10 views

CVE-2023-0674

A vulnerability, which was classified as problematic, has been found in XXL-JOB 2.3.1. Affected by this issue is some unknown functionality of the file /user/updatePwd of the component New Password Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely...

6.5CVSS6.4AI score
Exploits0References3
Prion
Prion
added 2023/02/04 8:15 a.m.22 views

Cross site request forgery (csrf)

A vulnerability, which was classified as problematic, has been found in XXL-JOB 2.3.1. Affected by this issue is some unknown functionality of the file /user/updatePwd of the component New Password Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely...

5CVSS6.4AI score0.00111EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/02/04 7:34 a.m.11 views

CVE-2023-0674 XXL-JOB New Password updatePwd cross-site request forgery

A vulnerability, which was classified as problematic, has been found in XXL-JOB 2.3.1. Affected by this issue is some unknown functionality of the file /user/updatePwd of the component New Password Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely...

5CVSS6.6AI score0.00111EPSS
Exploits1References3
Rows per page
Query Builder