Description
This affects all versions of the package com.xuxueli:xxl-job. HTML uploaded payload executed successfully through /xxl-job-admin/user/add and /xxl-job-admin/user/update.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | com.xuxueli:xxl-job | — | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.xuxueli:xxl-job | <= 2.4.0 | — | GHSA-4j2p-x79m-jcj8 |