Description
xxl-job-admin 2.4.0 is vulnerable to Insecure Permissions via /xxl-job-admin/joblog/clearLog and /xxl-job-admin/joblog/logDetailCat.
Remediation
References
https://github.com/xuxueli/xxl-job/issues/3330
Related Vulnerabilities
CVE-2023-33962 Vulnerability in maven package io.jstach:jstachio
CVE-2023-2251 Vulnerability in npm package yaml
CVE-2021-21290 Vulnerability in maven package io.netty:netty-transport-native-unix-common-tests
CVE-2020-8203 Vulnerability in npm package lodash
CVE-2021-46365 Vulnerability in maven package info.magnolia:magnolia-core