[MAVEN:GHSA-JHJM-5XJG-MPQP] Xuxueli xxl-job allows attacker to obtain sensitive information via the pageList parameter
Severity
High
Affected Packages
1
CVEs
1
Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v 2.3.0 and v.2.3.1 allows attacker to obtain sensitive information via the pageList parameter.
| Package | Affected Version |
|---|---|
 pkg:maven/com.xuxueli/xxl-job
|
>= 2.2.0, <= 2.3.1 |
- ID
- MAVEN:GHSA-JHJM-5XJG-MPQP
- Severity
- high
- URL
- https://github.com/advisories/GHSA-jhjm-5xjg-mpqp
- Published
-
2023-03-21T21:30:19
(18 months ago) - Modified
-
2023-03-24T22:20:39
(18 months ago) - Rights
- Maven Security Team
| Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
|---|---|---|---|---|---|---|---|
| Affected | pkg:maven/com.xuxueli/xxl-job | com.xuxueli |
xxl-job
|
>= 2.2.0 <= 2.3.1 |
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
|---|---|---|---|---|---|---|---|---|---|---|---|
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |