CoreCVE
Back

HIGH

A Cross-Site Request Forgery (CSRF) in XXL-Job v2.3.0 allows attackers to arbitrarily create administrator accounts via the component /gaia-job-admin/user/add

Published May 23, 2022

Description

A Cross-Site Request Forgery (CSRF) in XXL-Job v2.3.0 allows attackers to arbitrarily create administrator accounts via the component /gaia-job-admin/user/add.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (4)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mitre
Published May 23, 2022
Updated Aug 3, 2024
Reserved Apr 11, 2022
Link CVE-2022-29002

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2022-29002

Red Hat

No data

ENISA EUVD

Assigner mitre
Published May 23, 2022
Updated Aug 3, 2024
Link EUVD-2022-5268

GitHub

Link GHSA-V3C9-W6G2-HJG3