Description

Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v 2.3.0 and v.2.3.1 allows attacker to obtain sensitive information via the pageList parameter.

Remediation

References

https://github.com/xuxueli/xxl-job/issues/3096

Related Vulnerabilities

CVE-2023-50710 Vulnerability in npm package hono

CVE-2023-39154 Vulnerability in maven package com.qualys.plugins:qualys-was

CVE-2017-16138 Vulnerability in maven package org.webjars.npm:mime

CVE-2022-43484 Vulnerability in maven package org.terasoluna.gfw:terasoluna-gfw-common

CVE-2021-23442 Vulnerability in npm package @cookiex/deep

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Exploit Issue Tracking Third Party Advisory NVD-CWE-noinfo