Description
xxl-job-admin 2.4.0 is vulnerable to Insecure Permissions via /xxl-job-admin/joblog/clearLog and /xxl-job-admin/joblog/logDetailCat.
Remediation
References
https://github.com/xuxueli/xxl-job/issues/3330
Related Vulnerabilities
CVE-2018-3746 Vulnerability in npm package pdfinfojs
CVE-2020-7616 Vulnerability in npm package express-mock-middleware
CVE-2020-35202 Vulnerability in maven package org.igniterealtime.openfire.plugins:dbaccess
CVE-2019-10768 Vulnerability in maven package org.webjars.bower:angular
CVE-2021-20085 Vulnerability in npm package backbone-query-parameters