Description
xxl-job 2.2.0 allows Information Disclosure of username, model, and password via job/admin/controller/UserController.java.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.xuxueli:xxl-job | <= 2.2.0 | — | GHSA-m5q9-488r-4rmp |
High · 7.5
CVE-2020-23811
EUVD-2022-4495GHSA-m5q9-488r-4rmp
xxl-job sensitive data exposure
Published Sep 3, 2020 · Updated Aug 4, 2024 · Assigned by mitre