Lucene search

K
osvGoogleOSV:CVE-2020-29204
HistoryDec 27, 2020 - 6:15 a.m.

CVE-2020-29204

2020-12-2706:15:12
Google
osv.dev
2
cve-2020-29204
xxl-job
stored xss
add user
20-character limit
java controller
software

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

35.1%

XXL-JOB 2.2.0 allows Stored XSS (in Add User) to bypass the 20-character limit via xxl-job-admin/src/main/java/com/xxl/job/admin/controller/UserController.java.

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

35.1%

Related for OSV:CVE-2020-29204