Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown
CVE-2024-42681
Disclosure Date: August 15, 2024 (last updated August 20, 2024)
Insecure Permissions vulnerability in xxl-job v.2.4.1 allows a remote attacker to execute arbitrary code via the Sub-Task ID component.
0
Attacker Value
Unknown
CVE-2023-33779
Disclosure Date: May 26, 2023 (last updated February 25, 2025)
A lateral privilege escalation vulnerability in XXL-Job v2.4.1 allows users to execute arbitrary commands on another user's account via a crafted POST request to the component /jobinfo/.
0
