Description
This affects all versions of the package com.xuxueli:xxl-job. HTML uploaded payload executed successfully through /xxl-job-admin/user/add and /xxl-job-admin/user/update.
Remediation
References
https://security.snyk.io/vuln/SNYK-JAVA-COMXUXUELI-3248764
Related Vulnerabilities
CVE-2023-2479 Vulnerability in npm package appium-desktop
CVE-2023-48910 Vulnerability in maven package io.github.microcks:microcks
CVE-2021-3757 Vulnerability in npm package immer
CVE-2020-7788 Vulnerability in maven package org.webjars.npm:ini
CVE-2018-13797 Vulnerability in maven package org.webjars.npm:macaddress