Description
XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin function with low Privilege account.
Remediation
References
https://github.com/Richard-Muzi/vulnerability/issues/1
Related Vulnerabilities
CVE-2019-16776 Vulnerability in maven package org.webjars:npm
CVE-2018-25031 Vulnerability in maven package org.webjars:swagger-ui
CVE-2023-45137 Vulnerability in maven package org.xwiki.platform:xwiki-platform-web-templates
CVE-2018-20227 Vulnerability in maven package org.eclipse.rdf4j:rdf4j-util
CVE-2018-1131 Vulnerability in maven package org.infinispan:infinispan-core