Description
Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v 2.3.0 and v.2.3.1 allows attacker to obtain sensitive information via the pageList parameter.
Remediation
References
https://github.com/xuxueli/xxl-job/issues/3096
Related Vulnerabilities
CVE-2018-16487 Vulnerability in maven package org.webjars.bower:lodash
CVE-2020-8125 Vulnerability in npm package klona
CVE-2021-3804 Vulnerability in npm package taro
CVE-2022-41828 Vulnerability in maven package com.amazon.redshift:redshift-jdbc42
CVE-2023-48887 Vulnerability in maven package org.jupiter-rpc:jupiter-rpc