Description
xxl-job-admin 2.4.0 is vulnerable to Remote Code Execution (RCE) via /xxl-job-admin/jobcode/save.
Remediation
References
https://github.com/xuxueli/xxl-job/issues/3333
Related Vulnerabilities
CVE-2013-5679 Vulnerability in maven package org.owasp.esapi:esapi
CVE-2021-23397 Vulnerability in npm package @ianwalter/merge
CVE-2021-46366 Vulnerability in maven package info.magnolia:magnolia-core
CVE-2021-33420 Vulnerability in npm package replicator
CVE-2020-7795 Vulnerability in npm package get-npm-package-version