Описание
Improper Privilege Management in com.xuxueli:xxl-job
XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin function with low Privilege account.
Пакеты
Наименование
com.xuxueli:xxl-job
maven
Затронутые версииВерсия исправления
<= 2.3.1
2.4.0
Связанные уязвимости
CVSS3: 8.8
nvd
больше 3 лет назад
XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin function with low Privilege account.