Description
xxl-job-admin 2.4.0 is vulnerable to Insecure Permissions via /xxl-job-admin/joblog/clearLog and /xxl-job-admin/joblog/logDetailCat.
Remediation
References
https://github.com/xuxueli/xxl-job/issues/3330
Related Vulnerabilities
CVE-2021-22204 Vulnerability in npm package exiftool-vendored
CVE-2019-10768 Vulnerability in npm package angular
CVE-2020-8136 Vulnerability in npm package fastify-multipart
CVE-2021-3765 Vulnerability in npm package validator
CVE-2020-35199 Vulnerability in maven package org.igniterealtime.openfire.plugins:bookmarks