Lucene search
Veracode Vulnerability DatabaseVERACODE:39177HistoryFeb 09, 2023 - 6:27 a.m.
Cross-Site Request Forgery (CSRF)
2023-02-0906:27:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
xxl-job
csrf
vulnerability
password modification
validation missing
attacker
0.001 Low
EPSS
Percentile
31.0%
xxl-job is vulnerable to Cross-Site Request Forgery (CSRF). The vulnerability exists due to a lack of validation in updatePwd which allows an attacker to modify any user passwords.
Related
osv
osv
Cross-Site Request Forgery in XXL Job
2023-02-04 09:30:20
CVE-2023-0674
2023-02-04 08:15:08
prion
prion
Cross site request forgery (csrf)
2023-02-04 08:15:00
cvelist
cvelist
CVE-2023-0674 XXL-JOB New Password updatePwd cross-site request forgery
2023-02-04 07:34:05
nvd
nvd
CVE-2023-0674
2023-02-04 08:15:08
cve
cve
CVE-2023-0674
2023-02-04 08:15:08
github
github
Cross-Site Request Forgery in XXL Job
2023-02-04 09:30:20