Lucene search
Veracode Vulnerability DatabaseVERACODE:35668HistoryMay 24, 2022 - 6:45 a.m.
Cross-Site Request Forgery (CSRF)
2022-05-2406:45:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
28
0.001 Low
EPSS
Percentile
43.6%
XXL Job Core is vulnerable to cross-site request forgery. The vulnerability exists in xxl-job-admin component due to less restrictions of user permissions which allows an attacker to perform unauthorized actions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| xxl-job-core | eq | 2.3.0 | |
| xxl-job-core | eq | 2.3.0 |
Related
cnvd
cnvd
XXL-JOB Cross-site Request Forgery Vulnerability
2022-05-24 00:00:00
cvelist
cvelist
CVE-2022-29002
2022-05-23 20:50:39
github
github
Cross-Site Request Forgery in XXL-Job
2022-05-24 00:00:18
prion
prion
Cross site request forgery (csrf)
2022-05-23 21:16:00
nvd
nvd
CVE-2022-29002
2022-05-23 21:16:04
cve
cve
CVE-2022-29002
2022-05-23 21:16:04
osv
osv
Cross-Site Request Forgery in XXL-Job
2022-05-24 00:00:18
CVE-2022-29002
2022-05-23 21:16:04