GHSA-jhjm-5xjg-mpqp
Xuxueli xxl-job allows attacker to obtain sensitive information via the pageList parameter
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | com.xuxueli:xxl-job | >= 2.2.0, <= 2.3.1 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v 2.3.0 and v.2.3.1 allows attacker to obtain sensitive information via the pageList parameter.
References
External links from the advisory. They lead to third-party sites.