Stored Cross-Site Scripting Vulnerability in XXL-Job by xuxueli
CVE-2022-29770

5.4MEDIUM

Key Information:

Vendor

Xuxueli

Status
Xxl-job
Vendor
CVE Published:
3 June 2022

What is CVE-2022-29770?

XXL-Job version 2.3.0 has been identified to have a vulnerability that allows attackers to inject malicious scripts via the /xxl-job-admin/jobinfo endpoint. If exploited, this Stored Cross-Site Scripting (XSS) issue can enable unauthorized access to sensitive data and facilitate various attacks on users of the application. Proper mitigations should be implemented to ensure the security of users.

References

https://github.com/xuxueli/xxl-job/issues/2836
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.