Description
xxl-job-admin 2.4.0 is vulnerable to Remote Code Execution (RCE) via /xxl-job-admin/jobcode/save.
Remediation
References
https://github.com/xuxueli/xxl-job/issues/3333
Related Vulnerabilities
CVE-2023-6293 Vulnerability in npm package sequelize-typescript
CVE-2016-10531 Vulnerability in maven package org.webjars.npm:marked
CVE-2011-4367 Vulnerability in maven package org.apache.myfaces.core:myfaces-impl
CVE-2021-34079 Vulnerability in npm package docker-tester
CVE-2022-22965 Vulnerability in maven package org.springframework:spring-webmvc