CVE-2020-24922 - Cross Site Request Forgery (CSRF) vulnerability in xxl-job-admin/user/add in xuxueli xxl-job version 2.2.0, allows remote attackers to execute arbitrary code and esclate privileges via crafted .html file

Back Back to CVE browser

HIGH

Cross Site Request Forgery (CSRF) vulnerability in xxl-job-admin/user/add in xuxueli xxl-job version 2.2.0, allows remote attackers to execute arbitrary code and esclate privileges via crafted .html file

Published Aug 11, 2023

8.8

HIGH

CVSS 3.1

EPSS 0.50%

Description

Cross Site Request Forgery (CSRF) vulnerability in xxl-job-admin/user/add in xuxueli xxl-job version 2.2.0, allows remote attackers to execute arbitrary code and esclate privileges via crafted .html file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-2321
Advisory
https://github.com/advisories/GHSA-jp5r-4x9q-4vcf
Advisory
https://github.com/xuxueli/xxl-job/issues/1921
ExploitIssue TrackingVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-24922

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-2321		Advisory
https://github.com/advisories/GHSA-jp5r-4x9q-4vcf		Advisory
https://github.com/xuxueli/xxl-job/issues/1921		ExploitIssue TrackingVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-24922