CVE-2020-23811

2020-09-0317:15:11

Google

osv.dev

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.0%

JSON

xxl-job 2.2.0 allows Information Disclosure of username, model, and password via job/admin/controller/UserController.java.

CPENameOperatorVersion
xxl-jobeq1.6.2
xxl-jobeq2.2.0
xxl-jobeq1.6.0
xxl-jobeq1.9.1
xxl-jobeq1.3.0
xxl-jobeq1.4.0
xxl-jobeq2.1.0
xxl-jobeq2.0.1
xxl-jobeq1.5.0
xxl-jobeq2.0.2

Name	Operator	Version
xxl-job	eq	1.6.2
xxl-job	eq	2.2.0
xxl-job	eq	1.6.0
xxl-job	eq	1.9.1
xxl-job	eq	1.3.0
xxl-job	eq	1.4.0
xxl-job	eq	2.1.0
xxl-job	eq	2.0.1
xxl-job	eq	1.5.0
xxl-job	eq	2.0.2

Rows per page:

1-10 of 281

References

www.ccsq8.com/issues.html