GHSA-7qq9-9g2w-56f9
Improper Privilege Management in com.xuxueli:xxl-job
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | com.xuxueli:xxl-job | < 2.4.0 | 2.4.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin function with low Privilege account.
References
External links from the advisory. They lead to third-party sites.