Xxl-job@2.3.0 Security Vulnerabilities and Issues — Xxl-job@2.3.0 CVE List

Lucene search

XuxueliXxl-job2.3.0

3 matches found

CVE•added 2023/03/21 7:15 p.m.•93 views

CVE-2023-27087

Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v 2.3.0 and v.2.3.1 allows attacker to obtain sensitive information via the pageList parameter.

7.5CVSS7.2AI score0.00068EPSS

CVE•added 2022/06/03 9:15 p.m.•91 views

CVE-2022-29770

XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /xxl-job-admin/jobinfo.

5.4CVSS5.2AI score0.00266EPSS

CVE•added 2022/05/23 9:16 p.m.•75 views

CVE-2022-29002

A Cross-Site Request Forgery (CSRF) in XXL-Job v2.3.0 allows attackers to arbitrarily create administrator accounts via the component /gaia-job-admin/user/add.

8.8CVSS8.6AI score0.00112EPSS