Medium · 5.4 CVE-2023-48087 EUVD-2023-2867GHSA-3w8r-3jh9-89v9

xxl-job-admin vulnerable to Insecure Permissions

Published Nov 15, 2023 · Updated Aug 12, 2024 · Assigned by mitre

Description

xxl-job-admin 2.4.0 is vulnerable to Insecure Permissions via /xxl-job-admin/joblog/clearLog and /xxl-job-admin/joblog/logDetailCat.

Ecosystem	Package	Affected	Fixed	Record
Maven	com.xuxueli:xxl-job-admin	<= 2.4.0	—	GHSA-3w8r-3jh9-89v9