Description
xxl-job-admin 2.4.0 is vulnerable to Insecure Permissions via /xxl-job-admin/joblog/clearLog and /xxl-job-admin/joblog/logDetailCat.
Remediation
References
https://github.com/xuxueli/xxl-job/issues/3330
Related Vulnerabilities
CVE-2023-22457 Vulnerability in maven package org.xwiki.contrib:application-ckeditor-plugins
CVE-2019-9154 Vulnerability in maven package org.webjars.npm:openpgp
CVE-2020-26301 Vulnerability in npm package ssh2
CVE-2019-20444 Vulnerability in maven package io.netty:netty-codec-http
CVE-2020-5397 Vulnerability in maven package org.springframework:spring-webflux