CVE-2020-29204

2020-12-2705:36:08

mitre

www.cve.org

xxl-job

stored xss

bypass 20-char limit

user controller java

EPSS

0.001

Percentile

35.1%

JSON

XXL-JOB 2.2.0 allows Stored XSS (in Add User) to bypass the 20-character limit via xxl-job-admin/src/main/java/com/xxl/job/admin/controller/UserController.java.

References

github.com/xuxueli/xxl-job/issues/2083

EPSS

0.001

Percentile

35.1%

JSON

Related for CVELIST:CVE-2020-29204