Description
XXL-JOB 2.2.0 allows Stored XSS (in Add User) to bypass the 20-character limit via xxl-job-admin/src/main/java/com/xxl/job/admin/controller/UserController.java.
Remediation
References
https://github.com/xuxueli/xxl-job/issues/2083
Related Vulnerabilities
CVE-2021-21368 Vulnerability in maven package org.webjars.npm:msgpack5
CVE-2020-10705 Vulnerability in maven package io.undertow:undertow-core
CVE-2022-36944 Vulnerability in maven package org.scala-lang:scala-library
CVE-2020-10244 Vulnerability in maven package dev.paseto:jpaseto-impl
CVE-2021-31597 Vulnerability in npm package xmlhttprequest-ssl