CVE-2022-29002

CVSS v3.1 8.8 (High)

CVSS v2.0 6.8 (Medium)

EPSS 0.11 % (44^th)

Affected Products 1

Advisories 1

A Cross-Site Request Forgery (CSRF) in XXL-Job v2.3.0 allows attackers to arbitrarily create administrator accounts via the component /gaia-job-admin/user/add.

Weaknesses

CWE-352: Cross-Site Request Forgery (CSRF)

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2022-05-23 21:16:04
(2 years ago)
Updated Date: 2022-06-07 16:05:02
(2 years ago)

Affected Products

Xuxueli

Xxl-job

Configuration #1

		CPE23	From	Up To
	Xuxueli Xxl-job 2.3.0	cpe:2.3:a:xuxueli:xxl-job:2.3.0