Description
xxl-job-admin 2.4.0 is vulnerable to Insecure Permissions via /xxl-job-admin/joblog/clearLog and /xxl-job-admin/joblog/logDetailCat.
Remediation
References
https://github.com/xuxueli/xxl-job/issues/3330
Related Vulnerabilities
CVE-2022-39353 Vulnerability in maven package org.webjars.npm:xmldom
CVE-2020-7751 Vulnerability in npm package pathval
CVE-2016-10538 Vulnerability in npm package cli
CVE-2023-33202 Vulnerability in maven package org.bouncycastle:bc-fips-debug
CVE-2023-29204 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore