Description
xxl-job 2.2.0 allows Information Disclosure of username, model, and password via job/admin/controller/UserController.java.
Remediation
References
https://www.ccsq8.com/issues.html
Related Vulnerabilities
CVE-2023-26049 Vulnerability in maven package org.eclipse.jetty:jetty-http
CVE-2020-2096 Vulnerability in maven package org.jenkins-ci.plugins:gitlab-hook
CVE-2023-48711 Vulnerability in maven package org.webjars.npm:google-translate-api-browser
CVE-2020-5497 Vulnerability in maven package org.mitre:openid-connect-server-webapp
CVE-2020-5280 Vulnerability in maven package org.http4s:http4s-server