Description
xxl-job-admin 2.4.0 is vulnerable to Insecure Permissions via /xxl-job-admin/joblog/clearLog and /xxl-job-admin/joblog/logDetailCat.
Remediation
References
https://github.com/xuxueli/xxl-job/issues/3330
Related Vulnerabilities
CVE-2021-39154 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2017-16100 Vulnerability in npm package dns-sync
CVE-2021-43306 Vulnerability in npm package jquery-validation
CVE-2019-10744 Vulnerability in maven package org.webjars:lodash
CVE-2023-29211 Vulnerability in maven package org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki