Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2023-27087
Disclosure Date: March 21, 2023 (last updated October 08, 2023)
Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v 2.3.0 and v.2.3.1 allows attacker to obtain sensitive information via the pageList parameter.
0
Attacker Value
Unknown
CVE-2022-29770
Disclosure Date: June 03, 2022 (last updated February 23, 2025)
XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /xxl-job-admin/jobinfo.
0
Attacker Value
Unknown
CVE-2022-29002
Disclosure Date: May 23, 2022 (last updated February 23, 2025)
A Cross-Site Request Forgery (CSRF) in XXL-Job v2.3.0 allows attackers to arbitrarily create administrator accounts via the component /gaia-job-admin/user/add.
0
