Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown
CVE-2020-24922
Disclosure Date: August 11, 2023 (last updated February 25, 2025)
Cross Site Request Forgery (CSRF) vulnerability in xxl-job-admin/user/add in xuxueli xxl-job version 2.2.0, allows remote attackers to execute arbitrary code and esclate privileges via crafted .html file.
0
Attacker Value
Unknown
CVE-2023-27087
Disclosure Date: March 21, 2023 (last updated October 08, 2023)
Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v 2.3.0 and v.2.3.1 allows attacker to obtain sensitive information via the pageList parameter.
0
Attacker Value
Unknown
CVE-2022-40929
Disclosure Date: September 28, 2022 (last updated February 24, 2025)
XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case (running arbitrary Bash scripts on behalf of users).
0
Attacker Value
Unknown
CVE-2020-29204
Disclosure Date: December 27, 2020 (last updated February 22, 2025)
XXL-JOB 2.2.0 allows Stored XSS (in Add User) to bypass the 20-character limit via xxl-job-admin/src/main/java/com/xxl/job/admin/controller/UserController.java.
0
Attacker Value
Unknown
CVE-2020-23814
Disclosure Date: September 03, 2020 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in xxl-job v2.2.0 allow remote attackers to inject arbitrary web script or HTML via (1) AppName and (2)AddressList parameter in JobGroupController.java file.
0
Attacker Value
Unknown
CVE-2020-23811
Disclosure Date: September 03, 2020 (last updated November 28, 2024)
xxl-job 2.2.0 allows Information Disclosure of username, model, and password via job/admin/controller/UserController.java.
0
