GitHub Advisoryadvisory · Maven

GHSA-pqqj-299w-wf53 xxl-job Multiple cross-site scripting (XSS) vulnerabilities

MEDIUM Published 2022-05-24 Modified 2024-02-01 Official page ↗
Aliases
CVE-2020-23814
Ecosystem
Maven
Packages
com.xuxueli:xxl-job
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Reviewed
2024-02-01

Affected packages

• Maven com.xuxueli:xxl-job: < 2.3.0 → fixed in 2.3.0

Description

Multiple cross-site scripting (XSS) vulnerabilities in xxl-job v2.2.0 allow remote attackers to inject arbitrary web script or HTML via (1) AppName and (2)AddressList parameter in JobGroupController.java file.

Related

Alias · CVE (1)

  • CVE-2020-23814 Multiple cross-site scripting (XSS) vulnerabilities in xxl-job v2.2.0 allow remote attackers to inject arbitrary web script or HTML via (1)… vulnerability

References