VulnerableCode Package Details - pkg:maven/com.xuxueli/xxl-job@2.3.0

Search for packages

Advisory	Summary	Fixed in package version
GHSA-8gvg-f6qp-39wx Aliases: CVE-2022-29770	Cross site scripting in XXL-job XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /xxl-job-admin/jobinfo.	There are no reported fixed by versions.
GHSA-v3c9-w6g2-hjg3 Aliases: CVE-2022-29002	Cross-Site Request Forgery in XXL-Job A Cross-Site Request Forgery (CSRF) in XXL-Job v2.3.0 allows attackers to arbitrarily create administrator accounts …	There are no reported fixed by versions.
GHSA-7qq9-9g2w-56f9 Aliases: CVE-2022-36157	Improper Privilege Management in com.xuxueli:xxl-job XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in …	2.4.0 Vulnerable
GHSA-c352-x843-ggpq Aliases: CVE-2024-24113	XXL-JOB vulnerable to Server-Side Request Forgery xxl-job <= 2.4.2 has a Server-Side Request Forgery (SSRF) vulnerability, which causes low-privileged users …	There are no reported fixed by versions.
GHSA-4j2p-x79m-jcj8 Aliases: CVE-2023-26120	XXL-JOB vulnerable to Cross-site Scripting XXL-JOB (`com.xuxueli:xxl-job`) versions 2.4.0 and earlier are vulnerable to cross-site scripting (XSS). An HTML uploaded …	There are no reported fixed by versions.
GHSA-pv4m-h859-jwmq Aliases: CVE-2023-0674	Cross-Site Request Forgery in XXL Job A vulnerability, which was classified as problematic, has been found in XXL-JOB 2.3.1. Affected …	There are no reported fixed by versions.
GHSA-9mmj-64jh-ph9c Aliases: CVE-2023-33779	Privilege escalation in XXL-Job A lateral privilege escalation vulnerability in XXL-Job v2.4.1 allows users to execute arbitrary commands on another …	There are no reported fixed by versions.
GHSA-jhjm-5xjg-mpqp Aliases: CVE-2023-27087	Xuxueli xxl-job allows attacker to obtain sensitive information via the pageList parameter Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v …	There are no reported fixed by versions.
CVE-2022-43183	XXL-Job before v2.3.1 contains a Server-Side Request Forgery (SSRF) via the component /admin/controller/JobLogController.java.	There are no reported fixed by versions.
CVE-2022-36157	Improper Privilege Management XXL-JOB all versions as of 11 July 2022 is vulnerable to Insecure Permissions resulting in the ability …	There are no reported fixed by versions.
CVE-2022-29770	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting …	2.3.1 Vulnerable

Advisory

Summary

Fixed in package version

GHSA-8gvg-f6qp-39wx
Aliases:
CVE-2022-29770

Cross site scripting in XXL-job XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /xxl-job-admin/jobinfo.